More actions
Nest1984 is a watchdog daemon that helps enforce the Acceptable Use Policy (AUP) on Nest. It runs quietly in the background, using multiple detection methods to identify potential policy violations.
PCAP
Nest1984 uses packet capture to analyze symmetrical in-and-out traffic patterns. For example, if a user sends 50MB to a port and a process immediately sends 50MB back out, that’s a strong signal of proxy or VPN behavior. This module runs continuously.
Procmon
Procmon checks running processes against a list of known AUP-violating signatures, such as code-server, Minecraft, or certain tunneling tools.
Nethogs
As a backup to PCAP, Nethogs can catch short bursts of suspicious traffic that might not trip the main monitor, like lightweight or intermittent VPN/proxy activity.