I'm specifically thinking about a transparent proxy provider, since that's what we're using, so what happens if:
- Process
/Applications/Foo.app/Contents/MacOS/Foo
opens a connection to, say, google port 443 - After getting the connection set up, it then fork&execs
/bin/sh
(or whatever 😄).
Does a new flow get created? Or does it continue to use the existing one?