If a process opens a socket, OS has sufficient info to tag the packet with a process ID. Perfect for alerting while under the Default-Deny Firewall. Somehow,

If a process opens a socket, OS has sufficient info to tag the packet with a process ID. Perfect for alerting while under the Default-Deny Firewall. Somehow, FreeBSD has those.