github.com/castai/kvisor@v1.7.1-0.20240516114728-b3572a2607b5/tools/hack/events.txt (about) 1 +------------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ 2 |name |args | 3 +------------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ 4 |connect |[{"name":"sockfd","type":"int","value":12},{"name":"addr","type":"struct sockaddr*","value":{"sa_family":"AF_INET","sin_addr":"10.76.1.64","sin_port":"4040"}},{"name":"addrlen","type":"int","value":16}] | 5 |execve |[{"name":"pathname","type":"const char*","value":"/usr/sbin/sshd"},{"name":"argv","type":"const char*const*","value":["/usr/sbin/sshd","-D","-e","-R"]},{"name":"envp","type":"const char*const*","value":null}] | 6 |fchmodat |[{"name":"dirfd","type":"int","value":-100},{"name":"pathname","type":"const char*","value":"/var/lib/kubelet/pods/68a19c8e-0a05-438f-99dd-24ed842684b0/volumes/kubernetes.io~projected/kube-api-access-2w4dt/..2023_05_12_10_37_48.701305442/token"},{"name":"mode","type":"mode_t","value":416},{"name":"flags","type":"int","value":0}] | 7 |fchown |[{"name":"fd","type":"int","value":39},{"name":"owner","type":"uid_t","value":0},{"name":"group","type":"gid_t","value":0}] | 8 |fchownat |[{"name":"dirfd","type":"int","value":-100},{"name":"pathname","type":"const char*","value":"/var/lib/kubelet/pods/a28a2983-b7d5-43ec-a225-36e66df69448/volumes/kubernetes.io~projected/kube-api-access-7bj97/..2023_05_12_10_38_39.3431684406/namespace"},{"name":"owner","type":"uid_t","value":-1},{"name":"group","type":"gid_t","value":65534},{"name":"flags","type":"int","value":256}] | 9 |net_packet_dns_request |[{"name":"metadata","type":"trace.PktMeta","value":{"src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":59360,"dst_port":53,"protocol":17,"packet_len":82,"iface":"any"}},{"name":"dns_questions","type":"[]trace.DnsQueryData","value":[{"query":"kubernetes.default.svc.cluster.local","query_type":"SRV","query_class":"IN"}]}] | 10 |net_packet_dns_response |[{"name":"metadata","type":"trace.PktMeta","value":{"src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":53,"dst_port":54581,"protocol":17,"packet_len":78,"iface":"any"}},{"name":"dns_response","type":"[]trace.DnsResponseData","value":[{"query_data":{"query":"insertions.bind","query_type":"TXT","query_class":"CH"},"dns_answer":[{"answer_type":"TXT","ttl":0,"answer":"\u00048560"}]}]}] | 11 |net_packet_http_request |[{"name":"metadata","type":"trace.PktMeta","value":{"src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":57220,"dst_port":2021,"protocol":6,"packet_len":228,"iface":"any"}},{"name":"http_request","type":"trace.ProtoHTTPRequest","value":{"method":"POST","protocol":"HTTP/1.1","host":"127.0.0.1:2021","uri_path":"/logs","headers":{"Content-Length":["227173"],"Content-Type":["application/msgpack"],"Fluent-Tag":["kube_kvisord_kvisord-m8g6h_kvisord"],"User-Agent":["Fluent-Bit"]},"content_length":227173}}] | 12 |net_packet_http_response|[{"name":"metadata","type":"trace.PktMeta","value":{"src_ip":"10.76.0.7","dst_ip":"10.76.0.1","src_port":8081,"dst_port":50788,"protocol":6,"packet_len":190,"iface":"any"}},{"name":"http_response","type":"trace.ProtoHTTPResponse","value":{"status":"200 OK","status_code":200,"protocol":"HTTP/1.1","headers":{"Content-Length":["3"],"Content-Type":["text/plain; charset=utf-8"],"Date":["Fri, 12 May 2023 11:05:41 GMT"]},"content_length":3}}] | 13 |sched_process_exec |[{"name":"cmdpath","type":"const char*","value":"/bin/grpc_health_probe"},{"name":"pathname","type":"const char*","value":"/bin/grpc_health_probe"},{"name":"dev","type":"dev_t","value":597},{"name":"inode","type":"unsigned long","value":682227},{"name":"ctime","type":"unsigned long","value":1683827976761625815},{"name":"inode_mode","type":"umode_t","value":33261},{"name":"interpreter_pathname","type":"const char*","value":"/lib64/ld-2.33.so"},{"name":"interpreter_dev","type":"dev_t","value":265289728},{"name":"interpreter_inode","type":"unsigned long","value":111577},{"name":"interpreter_ctime","type":"unsigned long","value":1678533613276075450},{"name":"argv","type":"const char**","value":["/bin/grpc_health_probe","-addr=:8080"]},{"name":"interp","type":"const char*","value":"/bin/grpc_health_probe"},{"name":"stdin_type","type":"umode_t","value":8192},{"name":"stdin_path","type":"char*","value":"/dev/null"},{"name":"invoked_from_kernel","type":"int","value":0},{"name":"env","type":"const char**","value":null}]| 14 |security_inode_unlink |[{"name":"pathname","type":"const char*","value":"/var/lib/google-fluentbit/pos-files/node-problem-detector.db-journal"},{"name":"inode","type":"unsigned long","value":7795},{"name":"dev","type":"dev_t","value":8388609},{"name":"ctime","type":"u64","value":1683889522219753113}] | 15 |security_socket_accept |[{"name":"sockfd","type":"int","value":7},{"name":"local_addr","type":"struct sockaddr*","value":{"sa_family":"AF_INET6","sin6_addr":"::","sin6_flowinfo":"0","sin6_port":"10054","sin6_scopeid":"0"}}] | 16 |security_socket_connect |[{"name":"sockfd","type":"int","value":10},{"name":"remote_addr","type":"struct sockaddr*","value":{"sa_family":"AF_INET","sin_addr":"127.0.0.1","sin_port":"53"}}] | 17 |setgid |[{"name":"gid","type":"gid_t","value":0}] | 18 |setns |[{"name":"fd","type":"int","value":12},{"name":"nstype","type":"int","value":536870912}] | 19 |setpgid |[{"name":"pid","type":"pid_t","value":0},{"name":"pgid","type":"pid_t","value":0}] | 20 |setresgid |[{"name":"rgid","type":"gid_t","value":-1},{"name":"egid","type":"gid_t","value":0},{"name":"sgid","type":"gid_t","value":-1}] | 21 |setresuid |[{"name":"ruid","type":"uid_t","value":-1},{"name":"euid","type":"uid_t","value":0},{"name":"suid","type":"uid_t","value":-1}] | 22 |setsid |[] | 23 |setuid |[{"name":"uid","type":"uid_t","value":1000}] | 24 +------------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+