User service (no root)
loginctl enable-linger "$USER" so the service survives logout.
System service (root)
Notes
- These units run
clabs run(discover loop). - Intercept (MITM) is meant for a job or session — do not put it in a standing unit.
- After start, confirm rows in console Events / Hosts.