github.com/castai/kvisor@v1.7.1-0.20240516114728-b3572a2607b5/tools/hack/net_packet_dns.txt (about) 1 kvisord-h9fnp kvisord {"timestamp":1684850180756908053,"threadStartTime":1684850180756754865,"processorId":1,"processId":14,"cgroupId":446170,"threadId":15,"parentProcessId":7,"hostProcessId":4037747,"hostThreadId":4037751,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"sendto","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.76.1.221"},{"name":"dst","type":"const char*","value":"10.72.16.10"},{"name":"src_port","type":"u16","value":33393},{"name":"dst_port","type":"u16","value":53},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":55931,"QR":0,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":0,"Z":0,"responseCode":"no error","QDCount":1,"ANCount":0,"NSCount":0,"ARCount":0,"questions":[{"name":"google.lt.kvisord.svc.cluster.local","type":"A","class":"IN"}],"answers":[],"authorities":[],"additionals":[]}}]} 2 kvisord-h9fnp kvisord {"timestamp":1684850180758005385,"threadStartTime":1684850180756754865,"processorId":1,"processId":14,"cgroupId":446170,"threadId":15,"parentProcessId":7,"hostProcessId":4037747,"hostThreadId":4037751,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.72.16.10"},{"name":"dst","type":"const char*","value":"10.76.1.221"},{"name":"src_port","type":"u16","value":53},{"name":"dst_port","type":"u16","value":33393},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":55931,"QR":1,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":1,"Z":0,"responseCode":"non-existent domain","QDCount":1,"ANCount":0,"NSCount":1,"ARCount":0,"questions":[{"name":"google.lt.kvisord.svc.cluster.local","type":"A","class":"IN"}],"answers":[],"authorities":[{"name":"cluster.local","type":"SOA","class":"IN","TTL":60,"IP":"","NS":"","CNAME":"","PTR":"","TXTs":null,"SOA":{"MName":"ns.dns.cluster.local","RName":"hostmaster.cluster.local","serial":1684846800,"refresh":28800,"retry":7200,"expire":604800,"minimum":60},"SRV":{"priority":0,"weight":0,"port":0,"name":""},"MX":{"preference":0,"name":""},"OPT":[],"URI":{"priority":0,"weight":0,"target":""},"TXT":""}],"additionals":[]}}]} 3 kvisord-h9fnp kvisord {"timestamp":1684850180763438211,"threadStartTime":1684850180756754865,"processorId":1,"processId":14,"cgroupId":446170,"threadId":15,"parentProcessId":7,"hostProcessId":4037747,"hostThreadId":4037751,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"sendto","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.76.1.221"},{"name":"dst","type":"const char*","value":"10.72.16.10"},{"name":"src_port","type":"u16","value":33393},{"name":"dst_port","type":"u16","value":53},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":56199,"QR":0,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":0,"Z":0,"responseCode":"no error","QDCount":1,"ANCount":0,"NSCount":0,"ARCount":0,"questions":[{"name":"google.lt.kvisord.svc.cluster.local","type":"AAAA","class":"IN"}],"answers":[],"authorities":[],"additionals":[]}}]} 4 kvisord-h9fnp kvisord {"timestamp":1684850180764030970,"threadStartTime":1684850180756754865,"processorId":1,"processId":14,"cgroupId":446170,"threadId":15,"parentProcessId":7,"hostProcessId":4037747,"hostThreadId":4037751,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.72.16.10"},{"name":"dst","type":"const char*","value":"10.76.1.221"},{"name":"src_port","type":"u16","value":53},{"name":"dst_port","type":"u16","value":33393},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":56199,"QR":1,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":1,"Z":0,"responseCode":"non-existent domain","QDCount":1,"ANCount":0,"NSCount":1,"ARCount":0,"questions":[{"name":"google.lt.kvisord.svc.cluster.local","type":"AAAA","class":"IN"}],"answers":[],"authorities":[{"name":"cluster.local","type":"SOA","class":"IN","TTL":60,"IP":"","NS":"","CNAME":"","PTR":"","TXTs":null,"SOA":{"MName":"ns.dns.cluster.local","RName":"hostmaster.cluster.local","serial":1684846800,"refresh":28800,"retry":7200,"expire":604800,"minimum":60},"SRV":{"priority":0,"weight":0,"port":0,"name":""},"MX":{"preference":0,"name":""},"OPT":[],"URI":{"priority":0,"weight":0,"target":""},"TXT":""}],"additionals":[]}}]} 5 kvisord-h9fnp kvisord {"timestamp":1684850180764176807,"threadStartTime":1684850180756754865,"processorId":1,"processId":14,"cgroupId":446170,"threadId":15,"parentProcessId":7,"hostProcessId":4037747,"hostThreadId":4037751,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"sendto","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.76.1.221"},{"name":"dst","type":"const char*","value":"10.72.16.10"},{"name":"src_port","type":"u16","value":48187},{"name":"dst_port","type":"u16","value":53},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":53779,"QR":0,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":0,"Z":0,"responseCode":"no error","QDCount":1,"ANCount":0,"NSCount":0,"ARCount":0,"questions":[{"name":"google.lt.svc.cluster.local","type":"A","class":"IN"}],"answers":[],"authorities":[],"additionals":[]}}]} 6 kvisord-h9fnp kvisord {"timestamp":1684850180764227781,"threadStartTime":1684850180756754865,"processorId":1,"processId":14,"cgroupId":446170,"threadId":15,"parentProcessId":7,"hostProcessId":4037747,"hostThreadId":4037751,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"sendto","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.76.1.221"},{"name":"dst","type":"const char*","value":"10.72.16.10"},{"name":"src_port","type":"u16","value":48187},{"name":"dst_port","type":"u16","value":53},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":54129,"QR":0,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":0,"Z":0,"responseCode":"no error","QDCount":1,"ANCount":0,"NSCount":0,"ARCount":0,"questions":[{"name":"google.lt.svc.cluster.local","type":"AAAA","class":"IN"}],"answers":[],"authorities":[],"additionals":[]}}]} 7 kvisord-h9fnp kvisord {"timestamp":1684850180766909877,"threadStartTime":1684850180756754865,"processorId":0,"processId":14,"cgroupId":446170,"threadId":15,"parentProcessId":7,"hostProcessId":4037747,"hostThreadId":4037751,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.72.16.10"},{"name":"dst","type":"const char*","value":"10.76.1.221"},{"name":"src_port","type":"u16","value":53},{"name":"dst_port","type":"u16","value":48187},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":53779,"QR":1,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":1,"Z":0,"responseCode":"non-existent domain","QDCount":1,"ANCount":0,"NSCount":1,"ARCount":0,"questions":[{"name":"google.lt.svc.cluster.local","type":"A","class":"IN"}],"answers":[],"authorities":[{"name":"cluster.local","type":"SOA","class":"IN","TTL":60,"IP":"","NS":"","CNAME":"","PTR":"","TXTs":null,"SOA":{"MName":"ns.dns.cluster.local","RName":"hostmaster.cluster.local","serial":1684846800,"refresh":28800,"retry":7200,"expire":604800,"minimum":60},"SRV":{"priority":0,"weight":0,"port":0,"name":""},"MX":{"preference":0,"name":""},"OPT":[],"URI":{"priority":0,"weight":0,"target":""},"TXT":""}],"additionals":[]}}]} 8 kvisord-hq6dm kvisord-h9fnp kvisord kvisord {"timestamp":1684850180766943868,"threadStartTime":1684850180756754865,"processorId":0,"processId":14,"cgroupId":446170,"threadId":15,"parentProcessId":7,"hostProcessId":4037747,"hostThreadId":4037751,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.72.16.10"},{"name":"dst","type":"const char*","value":"10.76.1.221"},{"name":"src_port","type":"u16","value":53},{"name":"dst_port","type":"u16","value":48187},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":54129,"QR":1,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":1,"Z":0,"responseCode":"non-existent domain","QDCount":1,"ANCount":0,"NSCount":1,"ARCount":0,"questions":[{"name":"google.lt.svc.cluster.local","type":"AAAA","class":"IN"}],"answers":[],"authorities":[{"name":"cluster.local","type":"SOA","class":"IN","TTL":60,"IP":"","NS":"","CNAME":"","PTR":"","TXTs":null,"SOA":{"MName":"ns.dns.cluster.local","RName":"hostmaster.cluster.local","serial":1684846800,"refresh":28800,"retry":7200,"expire":604800,"minimum":60},"SRV":{"priority":0,"weight":0,"port":0,"name":""},"MX":{"preference":0,"name":""},"OPT":[],"URI":{"priority":0,"weight":0,"target":""},"TXT":""}],"additionals":[]}}]} 9 kvisord-h9fnp kvisord {"timestamp":1684850180768147074,"threadStartTime":1684850180756754865,"processorId":1,"processId":14,"cgroupId":446170,"threadId":15,"parentProcessId":7,"hostProcessId":4037747,"hostThreadId":4037751,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"sendto","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.76.1.221"},{"name":"dst","type":"const char*","value":"10.72.16.10"},{"name":"src_port","type":"u16","value":49464},{"name":"dst_port","type":"u16","value":53},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":29987,"QR":0,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":0,"Z":0,"responseCode":"no error","QDCount":1,"ANCount":0,"NSCount":0,"ARCount":0,"questions":[{"name":"google.lt.cluster.local","type":"A","class":"IN"}],"answers":[],"authorities":[],"additionals":[]}}]} 10 kvisord-h9fnp kvisord {"timestamp":1684850180768684315,"threadStartTime":1684850180756754865,"processorId":1,"processId":14,"cgroupId":446170,"threadId":15,"parentProcessId":7,"hostProcessId":4037747,"hostThreadId":4037751,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.72.16.10"},{"name":"dst","type":"const char*","value":"10.76.1.221"},{"name":"src_port","type":"u16","value":53},{"name":"dst_port","type":"u16","value":49464},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":29987,"QR":1,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":1,"Z":0,"responseCode":"non-existent domain","QDCount":1,"ANCount":0,"NSCount":1,"ARCount":0,"questions":[{"name":"google.lt.cluster.local","type":"A","class":"IN"}],"answers":[],"authorities":[{"name":"cluster.local","type":"SOA","class":"IN","TTL":60,"IP":"","NS":"","CNAME":"","PTR":"","TXTs":null,"SOA":{"MName":"ns.dns.cluster.local","RName":"hostmaster.cluster.local","serial":1684846800,"refresh":28800,"retry":7200,"expire":604800,"minimum":60},"SRV":{"priority":0,"weight":0,"port":0,"name":""},"MX":{"preference":0,"name":""},"OPT":[],"URI":{"priority":0,"weight":0,"target":""},"TXT":""}],"additionals":[]}}]} 11 kvisord-h9fnp kvisord {"timestamp":1684850180769184436,"threadStartTime":1684850180756754865,"processorId":1,"processId":14,"cgroupId":446170,"threadId":15,"parentProcessId":7,"hostProcessId":4037747,"hostThreadId":4037751,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"sendto","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.76.1.221"},{"name":"dst","type":"const char*","value":"10.72.16.10"},{"name":"src_port","type":"u16","value":49464},{"name":"dst_port","type":"u16","value":53},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":30290,"QR":0,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":0,"Z":0,"responseCode":"no error","QDCount":1,"ANCount":0,"NSCount":0,"ARCount":0,"questions":[{"name":"google.lt.cluster.local","type":"AAAA","class":"IN"}],"answers":[],"authorities":[],"additionals":[]}}]} 12 kvisord-h9fnp kvisord {"timestamp":1684850180769656367,"threadStartTime":1684850180756754865,"processorId":1,"processId":14,"cgroupId":446170,"threadId":15,"parentProcessId":7,"hostProcessId":4037747,"hostThreadId":4037751,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.72.16.10"},{"name":"dst","type":"const char*","value":"10.76.1.221"},{"name":"src_port","type":"u16","value":53},{"name":"dst_port","type":"u16","value":49464},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":30290,"QR":1,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":1,"Z":0,"responseCode":"non-existent domain","QDCount":1,"ANCount":0,"NSCount":1,"ARCount":0,"questions":[{"name":"google.lt.cluster.local","type":"AAAA","class":"IN"}],"answers":[],"authorities":[{"name":"cluster.local","type":"SOA","class":"IN","TTL":60,"IP":"","NS":"","CNAME":"","PTR":"","TXTs":null,"SOA":{"MName":"ns.dns.cluster.local","RName":"hostmaster.cluster.local","serial":1684846800,"refresh":28800,"retry":7200,"expire":604800,"minimum":60},"SRV":{"priority":0,"weight":0,"port":0,"name":""},"MX":{"preference":0,"name":""},"OPT":[],"URI":{"priority":0,"weight":0,"target":""},"TXT":""}],"additionals":[]}}]} 13 kvisord-h9fnp kvisord {"timestamp":1684850180769815829,"threadStartTime":1684850180756754865,"processorId":1,"processId":14,"cgroupId":446170,"threadId":15,"parentProcessId":7,"hostProcessId":4037747,"hostThreadId":4037751,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"sendto","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.76.1.221"},{"name":"dst","type":"const char*","value":"10.72.16.10"},{"name":"src_port","type":"u16","value":49808},{"name":"dst_port","type":"u16","value":53},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":31216,"QR":0,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":0,"Z":0,"responseCode":"no error","QDCount":1,"ANCount":0,"NSCount":0,"ARCount":0,"questions":[{"name":"google.lt.us-central1-c.c.engineering-test-353509.internal","type":"A","class":"IN"}],"answers":[],"authorities":[],"additionals":[]}}]} 14 kvisord-h9fnp kvisord {"timestamp":1684850180769854869,"threadStartTime":1684850180756754865,"processorId":1,"processId":14,"cgroupId":446170,"threadId":15,"parentProcessId":7,"hostProcessId":4037747,"hostThreadId":4037751,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"sendto","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.76.1.221"},{"name":"dst","type":"const char*","value":"10.72.16.10"},{"name":"src_port","type":"u16","value":49808},{"name":"dst_port","type":"u16","value":53},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":31662,"QR":0,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":0,"Z":0,"responseCode":"no error","QDCount":1,"ANCount":0,"NSCount":0,"ARCount":0,"questions":[{"name":"google.lt.us-central1-c.c.engineering-test-353509.internal","type":"AAAA","class":"IN"}],"answers":[],"authorities":[],"additionals":[]}}]} 15 kvisord-h9fnp kvisord {"timestamp":1684850180777467595,"threadStartTime":1684850180756754865,"processorId":0,"processId":14,"cgroupId":446170,"threadId":15,"parentProcessId":7,"hostProcessId":4037747,"hostThreadId":4037751,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.72.16.10"},{"name":"dst","type":"const char*","value":"10.76.1.221"},{"name":"src_port","type":"u16","value":53},{"name":"dst_port","type":"u16","value":49808},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":31216,"QR":1,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":1,"Z":0,"responseCode":"non-existent domain","QDCount":1,"ANCount":0,"NSCount":1,"ARCount":0,"questions":[{"name":"google.lt.us-central1-c.c.engineering-test-353509.internal","type":"A","class":"IN"}],"answers":[],"authorities":[{"name":"internal","type":"SOA","class":"IN","TTL":30,"IP":"","NS":"","CNAME":"","PTR":"","TXTs":null,"SOA":{"MName":"ns.us-central1.gcedns-prod.internal","RName":"cloud-dns-hostmaster.google.com","serial":2015030600,"refresh":7200,"retry":3600,"expire":24796800,"minimum":5},"SRV":{"priority":0,"weight":0,"port":0,"name":""},"MX":{"preference":0,"name":""},"OPT":[],"URI":{"priority":0,"weight":0,"target":""},"TXT":""}],"additionals":[]}}]} 16 kvisord-h9fnp kvisord {"timestamp":1684850180777520793,"threadStartTime":1684850180756754865,"processorId":0,"processId":14,"cgroupId":446170,"threadId":15,"parentProcessId":7,"hostProcessId":4037747,"hostThreadId":4037751,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.72.16.10"},{"name":"dst","type":"const char*","value":"10.76.1.221"},{"name":"src_port","type":"u16","value":53},{"name":"dst_port","type":"u16","value":49808},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":31662,"QR":1,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":1,"Z":0,"responseCode":"non-existent domain","QDCount":1,"ANCount":0,"NSCount":1,"ARCount":0,"questions":[{"name":"google.lt.us-central1-c.c.engineering-test-353509.internal","type":"AAAA","class":"IN"}],"answers":[],"authorities":[{"name":"internal","type":"SOA","class":"IN","TTL":30,"IP":"","NS":"","CNAME":"","PTR":"","TXTs":null,"SOA":{"MName":"ns.us-central1.gcedns-prod.internal","RName":"cloud-dns-hostmaster.google.com","serial":2015030600,"refresh":7200,"retry":3600,"expire":24796800,"minimum":5},"SRV":{"priority":0,"weight":0,"port":0,"name":""},"MX":{"preference":0,"name":""},"OPT":[],"URI":{"priority":0,"weight":0,"target":""},"TXT":""}],"additionals":[]}}]} 17 kvisord-h9fnp kvisord {"timestamp":1684850180779998438,"threadStartTime":1684850180756754865,"processorId":1,"processId":14,"cgroupId":446170,"threadId":15,"parentProcessId":7,"hostProcessId":4037747,"hostThreadId":4037751,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"sendto","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.76.1.221"},{"name":"dst","type":"const char*","value":"10.72.16.10"},{"name":"src_port","type":"u16","value":35011},{"name":"dst_port","type":"u16","value":53},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":15873,"QR":0,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":0,"Z":0,"responseCode":"no error","QDCount":1,"ANCount":0,"NSCount":0,"ARCount":0,"questions":[{"name":"google.lt.c.engineering-test-353509.internal","type":"A","class":"IN"}],"answers":[],"authorities":[],"additionals":[]}}]} 18 kvisord-h9fnp kvisord {"timestamp":1684850180780317890,"threadStartTime":1684850180756754865,"processorId":1,"processId":14,"cgroupId":446170,"threadId":15,"parentProcessId":7,"hostProcessId":4037747,"hostThreadId":4037751,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"sendto","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.76.1.221"},{"name":"dst","type":"const char*","value":"10.72.16.10"},{"name":"src_port","type":"u16","value":35011},{"name":"dst_port","type":"u16","value":53},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":16193,"QR":0,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":0,"Z":0,"responseCode":"no error","QDCount":1,"ANCount":0,"NSCount":0,"ARCount":0,"questions":[{"name":"google.lt.c.engineering-test-353509.internal","type":"AAAA","class":"IN"}],"answers":[],"authorities":[],"additionals":[]}}]} 19 kvisord-h9fnp kvisord {"timestamp":1684850180786901715,"threadStartTime":1684850180756754865,"processorId":1,"processId":14,"cgroupId":446170,"threadId":15,"parentProcessId":7,"hostProcessId":4037747,"hostThreadId":4037751,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.72.16.10"},{"name":"dst","type":"const char*","value":"10.76.1.221"},{"name":"src_port","type":"u16","value":53},{"name":"dst_port","type":"u16","value":35011},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":15873,"QR":1,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":1,"Z":0,"responseCode":"non-existent domain","QDCount":1,"ANCount":0,"NSCount":1,"ARCount":0,"questions":[{"name":"google.lt.c.engineering-test-353509.internal","type":"A","class":"IN"}],"answers":[],"authorities":[{"name":"internal","type":"SOA","class":"IN","TTL":30,"IP":"","NS":"","CNAME":"","PTR":"","TXTs":null,"SOA":{"MName":"ns.global.gcedns-prod.internal","RName":"cloud-dns-hostmaster.google.com","serial":2015030600,"refresh":7200,"retry":3600,"expire":24796800,"minimum":5},"SRV":{"priority":0,"weight":0,"port":0,"name":""},"MX":{"preference":0,"name":""},"OPT":[],"URI":{"priority":0,"weight":0,"target":""},"TXT":""}],"additionals":[]}}]} 20 kvisord-h9fnp kvisord {"timestamp":1684850180786963807,"threadStartTime":1684850180756754865,"processorId":1,"processId":14,"cgroupId":446170,"threadId":15,"parentProcessId":7,"hostProcessId":4037747,"hostThreadId":4037751,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.72.16.10"},{"name":"dst","type":"const char*","value":"10.76.1.221"},{"name":"src_port","type":"u16","value":53},{"name":"dst_port","type":"u16","value":35011},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":16193,"QR":1,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":1,"Z":0,"responseCode":"non-existent domain","QDCount":1,"ANCount":0,"NSCount":1,"ARCount":0,"questions":[{"name":"google.lt.c.engineering-test-353509.internal","type":"AAAA","class":"IN"}],"answers":[],"authorities":[{"name":"internal","type":"SOA","class":"IN","TTL":30,"IP":"","NS":"","CNAME":"","PTR":"","TXTs":null,"SOA":{"MName":"ns.global.gcedns-prod.internal","RName":"cloud-dns-hostmaster.google.com","serial":2015030600,"refresh":7200,"retry":3600,"expire":24796800,"minimum":5},"SRV":{"priority":0,"weight":0,"port":0,"name":""},"MX":{"preference":0,"name":""},"OPT":[],"URI":{"priority":0,"weight":0,"target":""},"TXT":""}],"additionals":[]}}]} 21 kvisord-h9fnp kvisord {"timestamp":1684850180787129710,"threadStartTime":1684850180756754865,"processorId":1,"processId":14,"cgroupId":446170,"threadId":15,"parentProcessId":7,"hostProcessId":4037747,"hostThreadId":4037751,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"sendto","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.76.1.221"},{"name":"dst","type":"const char*","value":"10.72.16.10"},{"name":"src_port","type":"u16","value":39372},{"name":"dst_port","type":"u16","value":53},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":8663,"QR":0,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":0,"Z":0,"responseCode":"no error","QDCount":1,"ANCount":0,"NSCount":0,"ARCount":0,"questions":[{"name":"google.lt.google.internal","type":"A","class":"IN"}],"answers":[],"authorities":[],"additionals":[]}}]} 22 kvisord-h9fnp kvisord {"timestamp":1684850180787182074,"threadStartTime":1684850180756754865,"processorId":1,"processId":14,"cgroupId":446170,"threadId":15,"parentProcessId":7,"hostProcessId":4037747,"hostThreadId":4037751,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"sendto","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.76.1.221"},{"name":"dst","type":"const char*","value":"10.72.16.10"},{"name":"src_port","type":"u16","value":39372},{"name":"dst_port","type":"u16","value":53},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":8919,"QR":0,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":0,"Z":0,"responseCode":"no error","QDCount":1,"ANCount":0,"NSCount":0,"ARCount":0,"questions":[{"name":"google.lt.google.internal","type":"AAAA","class":"IN"}],"answers":[],"authorities":[],"additionals":[]}}]} 23 kvisord-h9fnp kvisord {"timestamp":1684850180794559513,"threadStartTime":1684850180756754865,"processorId":0,"processId":14,"cgroupId":446170,"threadId":15,"parentProcessId":7,"hostProcessId":4037747,"hostThreadId":4037751,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.72.16.10"},{"name":"dst","type":"const char*","value":"10.76.1.221"},{"name":"src_port","type":"u16","value":53},{"name":"dst_port","type":"u16","value":39372},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":8663,"QR":1,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":1,"Z":0,"responseCode":"non-existent domain","QDCount":1,"ANCount":0,"NSCount":1,"ARCount":0,"questions":[{"name":"google.lt.google.internal","type":"A","class":"IN"}],"answers":[],"authorities":[{"name":"internal","type":"SOA","class":"IN","TTL":30,"IP":"","NS":"","CNAME":"","PTR":"","TXTs":null,"SOA":{"MName":"ns.global.gcedns-prod.internal","RName":"cloud-dns-hostmaster.google.com","serial":2015030600,"refresh":7200,"retry":3600,"expire":24796800,"minimum":5},"SRV":{"priority":0,"weight":0,"port":0,"name":""},"MX":{"preference":0,"name":""},"OPT":[],"URI":{"priority":0,"weight":0,"target":""},"TXT":""}],"additionals":[]}}]} 24 kvisord-h9fnp kvisord {"timestamp":1684850180794601313,"threadStartTime":1684850180756754865,"processorId":0,"processId":14,"cgroupId":446170,"threadId":15,"parentProcessId":7,"hostProcessId":4037747,"hostThreadId":4037751,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.72.16.10"},{"name":"dst","type":"const char*","value":"10.76.1.221"},{"name":"src_port","type":"u16","value":53},{"name":"dst_port","type":"u16","value":39372},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":8919,"QR":1,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":1,"Z":0,"responseCode":"non-existent domain","QDCount":1,"ANCount":0,"NSCount":1,"ARCount":0,"questions":[{"name":"google.lt.google.internal","type":"AAAA","class":"IN"}],"answers":[],"authorities":[{"name":"internal","type":"SOA","class":"IN","TTL":30,"IP":"","NS":"","CNAME":"","PTR":"","TXTs":null,"SOA":{"MName":"ns.global.gcedns-prod.internal","RName":"cloud-dns-hostmaster.google.com","serial":2015030600,"refresh":7200,"retry":3600,"expire":24796800,"minimum":5},"SRV":{"priority":0,"weight":0,"port":0,"name":""},"MX":{"preference":0,"name":""},"OPT":[],"URI":{"priority":0,"weight":0,"target":""},"TXT":""}],"additionals":[]}}]} 25 kvisord-h9fnp kvisord {"timestamp":1684850180794710248,"threadStartTime":1684850180756754865,"processorId":1,"processId":14,"cgroupId":446170,"threadId":15,"parentProcessId":7,"hostProcessId":4037747,"hostThreadId":4037751,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"sendto","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.76.1.221"},{"name":"dst","type":"const char*","value":"10.72.16.10"},{"name":"src_port","type":"u16","value":38894},{"name":"dst_port","type":"u16","value":53},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":52731,"QR":0,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":0,"Z":0,"responseCode":"no error","QDCount":1,"ANCount":0,"NSCount":0,"ARCount":0,"questions":[{"name":"google.lt","type":"A","class":"IN"}],"answers":[],"authorities":[],"additionals":[]}}]} 26 kvisord-h9fnp kvisord {"timestamp":1684850180795073295,"threadStartTime":1684850180756754865,"processorId":1,"processId":14,"cgroupId":446170,"threadId":15,"parentProcessId":7,"hostProcessId":4037747,"hostThreadId":4037751,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"sendto","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.76.1.221"},{"name":"dst","type":"const char*","value":"10.72.16.10"},{"name":"src_port","type":"u16","value":38894},{"name":"dst_port","type":"u16","value":53},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":52974,"QR":0,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":0,"Z":0,"responseCode":"no error","QDCount":1,"ANCount":0,"NSCount":0,"ARCount":0,"questions":[{"name":"google.lt","type":"AAAA","class":"IN"}],"answers":[],"authorities":[],"additionals":[]}}]} 27 kvisord-h9fnp kvisord {"timestamp":1684850180908301250,"threadStartTime":1684850180756754865,"processorId":0,"processId":14,"cgroupId":446170,"threadId":15,"parentProcessId":7,"hostProcessId":4037747,"hostThreadId":4037751,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.72.16.10"},{"name":"dst","type":"const char*","value":"10.76.1.221"},{"name":"src_port","type":"u16","value":53},{"name":"dst_port","type":"u16","value":38894},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":52974,"QR":1,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":1,"Z":0,"responseCode":"no error","QDCount":1,"ANCount":1,"NSCount":0,"ARCount":0,"questions":[{"name":"google.lt","type":"AAAA","class":"IN"}],"answers":[{"name":"google.lt","type":"AAAA","class":"IN","TTL":30,"IP":"2607:f8b0:4001:c1b::5e","NS":"","CNAME":"","PTR":"","TXTs":null,"SOA":{"MName":"","RName":"","serial":0,"refresh":0,"retry":0,"expire":0,"minimum":0},"SRV":{"priority":0,"weight":0,"port":0,"name":""},"MX":{"preference":0,"name":""},"OPT":[],"URI":{"priority":0,"weight":0,"target":""},"TXT":""}],"authorities":[],"additionals":[]}}]} 28 kvisord-h9fnp kvisord {"timestamp":1684850180966925702,"threadStartTime":1684850180756754865,"processorId":0,"processId":14,"cgroupId":446170,"threadId":15,"parentProcessId":7,"hostProcessId":4037747,"hostThreadId":4037751,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.72.16.10"},{"name":"dst","type":"const char*","value":"10.76.1.221"},{"name":"src_port","type":"u16","value":53},{"name":"dst_port","type":"u16","value":38894},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":52731,"QR":1,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":1,"Z":0,"responseCode":"no error","QDCount":1,"ANCount":1,"NSCount":0,"ARCount":0,"questions":[{"name":"google.lt","type":"A","class":"IN"}],"answers":[{"name":"google.lt","type":"A","class":"IN","TTL":30,"IP":"173.194.197.94","NS":"","CNAME":"","PTR":"","TXTs":null,"SOA":{"MName":"","RName":"","serial":0,"refresh":0,"retry":0,"expire":0,"minimum":0},"SRV":{"priority":0,"weight":0,"port":0,"name":""},"MX":{"preference":0,"name":""},"OPT":[],"URI":{"priority":0,"weight":0,"target":""},"TXT":""}],"authorities":[],"additionals":[]}}]} 29 kvisord-h9fnp kvisord {"timestamp":1684850284078311416,"threadStartTime":1684850284078158746,"processorId":0,"processId":16,"cgroupId":446170,"threadId":17,"parentProcessId":7,"hostProcessId":4042277,"hostThreadId":4042278,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"sendto","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.76.1.221"},{"name":"dst","type":"const char*","value":"10.72.16.10"},{"name":"src_port","type":"u16","value":38493},{"name":"dst_port","type":"u16","value":53},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":12733,"QR":0,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":0,"Z":0,"responseCode":"no error","QDCount":1,"ANCount":0,"NSCount":0,"ARCount":0,"questions":[{"name":"one.lt.kvisord.svc.cluster.local","type":"A","class":"IN"}],"answers":[],"authorities":[],"additionals":[]}}]} 30 kvisord-h9fnp kvisord {"timestamp":1684850284078909598,"threadStartTime":1684850284078158746,"processorId":0,"processId":16,"cgroupId":446170,"threadId":17,"parentProcessId":7,"hostProcessId":4042277,"hostThreadId":4042278,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.72.16.10"},{"name":"dst","type":"const char*","value":"10.76.1.221"},{"name":"src_port","type":"u16","value":53},{"name":"dst_port","type":"u16","value":38493},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":12733,"QR":1,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":1,"Z":0,"responseCode":"non-existent domain","QDCount":1,"ANCount":0,"NSCount":1,"ARCount":0,"questions":[{"name":"one.lt.kvisord.svc.cluster.local","type":"A","class":"IN"}],"answers":[],"authorities":[{"name":"cluster.local","type":"SOA","class":"IN","TTL":60,"IP":"","NS":"","CNAME":"","PTR":"","TXTs":null,"SOA":{"MName":"ns.dns.cluster.local","RName":"hostmaster.cluster.local","serial":1684846800,"refresh":28800,"retry":7200,"expire":604800,"minimum":60},"SRV":{"priority":0,"weight":0,"port":0,"name":""},"MX":{"preference":0,"name":""},"OPT":[],"URI":{"priority":0,"weight":0,"target":""},"TXT":""}],"additionals":[]}}]} 31 kvisord-h9fnp kvisord {"timestamp":1684850284079034778,"threadStartTime":1684850284078158746,"processorId":0,"processId":16,"cgroupId":446170,"threadId":17,"parentProcessId":7,"hostProcessId":4042277,"hostThreadId":4042278,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"sendto","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.76.1.221"},{"name":"dst","type":"const char*","value":"10.72.16.10"},{"name":"src_port","type":"u16","value":38493},{"name":"dst_port","type":"u16","value":53},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":12930,"QR":0,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":0,"Z":0,"responseCode":"no error","QDCount":1,"ANCount":0,"NSCount":0,"ARCount":0,"questions":[{"name":"one.lt.kvisord.svc.cluster.local","type":"AAAA","class":"IN"}],"answers":[],"authorities":[],"additionals":[]}}]} 32 kvisord-h9fnp kvisord {"timestamp":1684850284079768536,"threadStartTime":1684850284078158746,"processorId":0,"processId":16,"cgroupId":446170,"threadId":17,"parentProcessId":7,"hostProcessId":4042277,"hostThreadId":4042278,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"sendto","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.76.1.221"},{"name":"dst","type":"const char*","value":"10.72.16.10"},{"name":"src_port","type":"u16","value":59570},{"name":"dst_port","type":"u16","value":53},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":42068,"QR":0,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":0,"Z":0,"responseCode":"no error","QDCount":1,"ANCount":0,"NSCount":0,"ARCount":0,"questions":[{"name":"one.lt.svc.cluster.local","type":"A","class":"IN"}],"answers":[],"authorities":[],"additionals":[]}}]} 33 kvisord-h9fnp kvisord {"timestamp":1684850284080409038,"threadStartTime":1684850284078158746,"processorId":0,"processId":16,"cgroupId":446170,"threadId":17,"parentProcessId":7,"hostProcessId":4042277,"hostThreadId":4042278,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"sendto","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.76.1.221"},{"name":"dst","type":"const char*","value":"10.72.16.10"},{"name":"src_port","type":"u16","value":59570},{"name":"dst_port","type":"u16","value":53},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":42274,"QR":0,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":0,"Z":0,"responseCode":"no error","QDCount":1,"ANCount":0,"NSCount":0,"ARCount":0,"questions":[{"name":"one.lt.svc.cluster.local","type":"AAAA","class":"IN"}],"answers":[],"authorities":[],"additionals":[]}}]} 34 kvisord-h9fnp kvisord {"timestamp":1684850284083376469,"threadStartTime":1684850284078158746,"processorId":0,"processId":16,"cgroupId":446170,"threadId":17,"parentProcessId":7,"hostProcessId":4042277,"hostThreadId":4042278,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.72.16.10"},{"name":"dst","type":"const char*","value":"10.76.1.221"},{"name":"src_port","type":"u16","value":53},{"name":"dst_port","type":"u16","value":59570},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":42068,"QR":1,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":1,"Z":0,"responseCode":"non-existent domain","QDCount":1,"ANCount":0,"NSCount":1,"ARCount":0,"questions":[{"name":"one.lt.svc.cluster.local","type":"A","class":"IN"}],"answers":[],"authorities":[{"name":"cluster.local","type":"SOA","class":"IN","TTL":60,"IP":"","NS":"","CNAME":"","PTR":"","TXTs":null,"SOA":{"MName":"ns.dns.cluster.local","RName":"hostmaster.cluster.local","serial":1684846800,"refresh":28800,"retry":7200,"expire":604800,"minimum":60},"SRV":{"priority":0,"weight":0,"port":0,"name":""},"MX":{"preference":0,"name":""},"OPT":[],"URI":{"priority":0,"weight":0,"target":""},"TXT":""}],"additionals":[]}}]} 35 kvisord-h9fnp kvisord {"timestamp":1684850284083420853,"threadStartTime":1684850284078158746,"processorId":0,"processId":16,"cgroupId":446170,"threadId":17,"parentProcessId":7,"hostProcessId":4042277,"hostThreadId":4042278,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.72.16.10"},{"name":"dst","type":"const char*","value":"10.76.1.221"},{"name":"src_port","type":"u16","value":53},{"name":"dst_port","type":"u16","value":59570},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":42274,"QR":1,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":1,"Z":0,"responseCode":"non-existent domain","QDCount":1,"ANCount":0,"NSCount":1,"ARCount":0,"questions":[{"name":"one.lt.svc.cluster.local","type":"AAAA","class":"IN"}],"answers":[],"authorities":[{"name":"cluster.local","type":"SOA","class":"IN","TTL":60,"IP":"","NS":"","CNAME":"","PTR":"","TXTs":null,"SOA":{"MName":"ns.dns.cluster.local","RName":"hostmaster.cluster.local","serial":1684846800,"refresh":28800,"retry":7200,"expire":604800,"minimum":60},"SRV":{"priority":0,"weight":0,"port":0,"name":""},"MX":{"preference":0,"name":""},"OPT":[],"URI":{"priority":0,"weight":0,"target":""},"TXT":""}],"additionals":[]}}]} 36 kvisord-h9fnp kvisord {"timestamp":1684850284083523146,"threadStartTime":1684850284078158746,"processorId":0,"processId":16,"cgroupId":446170,"threadId":17,"parentProcessId":7,"hostProcessId":4042277,"hostThreadId":4042278,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"sendto","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.76.1.221"},{"name":"dst","type":"const char*","value":"10.72.16.10"},{"name":"src_port","type":"u16","value":57442},{"name":"dst_port","type":"u16","value":53},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":50146,"QR":0,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":0,"Z":0,"responseCode":"no error","QDCount":1,"ANCount":0,"NSCount":0,"ARCount":0,"questions":[{"name":"one.lt.cluster.local","type":"A","class":"IN"}],"answers":[],"authorities":[],"additionals":[]}}]} 37 kvisord-h9fnp kvisord {"timestamp":1684850284083590139,"threadStartTime":1684850284078158746,"processorId":0,"processId":16,"cgroupId":446170,"threadId":17,"parentProcessId":7,"hostProcessId":4042277,"hostThreadId":4042278,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"sendto","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.76.1.221"},{"name":"dst","type":"const char*","value":"10.72.16.10"},{"name":"src_port","type":"u16","value":57442},{"name":"dst_port","type":"u16","value":53},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":50470,"QR":0,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":0,"Z":0,"responseCode":"no error","QDCount":1,"ANCount":0,"NSCount":0,"ARCount":0,"questions":[{"name":"one.lt.cluster.local","type":"AAAA","class":"IN"}],"answers":[],"authorities":[],"additionals":[]}}]} 38 kvisord-h9fnp kvisord {"timestamp":1684850284079506452,"threadStartTime":1684850284078158746,"processorId":1,"processId":16,"cgroupId":446170,"threadId":17,"parentProcessId":7,"hostProcessId":4042277,"hostThreadId":4042278,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.72.16.10"},{"name":"dst","type":"const char*","value":"10.76.1.221"},{"name":"src_port","type":"u16","value":53},{"name":"dst_port","type":"u16","value":38493},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":12930,"QR":1,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":1,"Z":0,"responseCode":"non-existent domain","QDCount":1,"ANCount":0,"NSCount":1,"ARCount":0,"questions":[{"name":"one.lt.kvisord.svc.cluster.local","type":"AAAA","class":"IN"}],"answers":[],"authorities":[{"name":"cluster.local","type":"SOA","class":"IN","TTL":60,"IP":"","NS":"","CNAME":"","PTR":"","TXTs":null,"SOA":{"MName":"ns.dns.cluster.local","RName":"hostmaster.cluster.local","serial":1684846800,"refresh":28800,"retry":7200,"expire":604800,"minimum":60},"SRV":{"priority":0,"weight":0,"port":0,"name":""},"MX":{"preference":0,"name":""},"OPT":[],"URI":{"priority":0,"weight":0,"target":""},"TXT":""}],"additionals":[]}}]} 39 kvisord-h9fnp kvisord {"timestamp":1684850284084094864,"threadStartTime":1684850284078158746,"processorId":1,"processId":16,"cgroupId":446170,"threadId":17,"parentProcessId":7,"hostProcessId":4042277,"hostThreadId":4042278,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.72.16.10"},{"name":"dst","type":"const char*","value":"10.76.1.221"},{"name":"src_port","type":"u16","value":53},{"name":"dst_port","type":"u16","value":57442},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":50470,"QR":1,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":1,"Z":0,"responseCode":"non-existent domain","QDCount":1,"ANCount":0,"NSCount":1,"ARCount":0,"questions":[{"name":"one.lt.cluster.local","type":"AAAA","class":"IN"}],"answers":[],"authorities":[{"name":"cluster.local","type":"SOA","class":"IN","TTL":60,"IP":"","NS":"","CNAME":"","PTR":"","TXTs":null,"SOA":{"MName":"ns.dns.cluster.local","RName":"hostmaster.cluster.local","serial":1684846800,"refresh":28800,"retry":7200,"expire":604800,"minimum":60},"SRV":{"priority":0,"weight":0,"port":0,"name":""},"MX":{"preference":0,"name":""},"OPT":[],"URI":{"priority":0,"weight":0,"target":""},"TXT":""}],"additionals":[]}}]} 40 kvisord-h9fnp kvisord {"timestamp":1684850284084228566,"threadStartTime":1684850284078158746,"processorId":1,"processId":16,"cgroupId":446170,"threadId":17,"parentProcessId":7,"hostProcessId":4042277,"hostThreadId":4042278,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.72.16.10"},{"name":"dst","type":"const char*","value":"10.76.1.221"},{"name":"src_port","type":"u16","value":53},{"name":"dst_port","type":"u16","value":57442},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":50146,"QR":1,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":1,"Z":0,"responseCode":"non-existent domain","QDCount":1,"ANCount":0,"NSCount":1,"ARCount":0,"questions":[{"name":"one.lt.cluster.local","type":"A","class":"IN"}],"answers":[],"authorities":[{"name":"cluster.local","type":"SOA","class":"IN","TTL":60,"IP":"","NS":"","CNAME":"","PTR":"","TXTs":null,"SOA":{"MName":"ns.dns.cluster.local","RName":"hostmaster.cluster.local","serial":1684846800,"refresh":28800,"retry":7200,"expire":604800,"minimum":60},"SRV":{"priority":0,"weight":0,"port":0,"name":""},"MX":{"preference":0,"name":""},"OPT":[],"URI":{"priority":0,"weight":0,"target":""},"TXT":""}],"additionals":[]}}]} 41 kvisord-h9fnp kvisord {"timestamp":1684850284086601476,"threadStartTime":1684850284078158746,"processorId":0,"processId":16,"cgroupId":446170,"threadId":17,"parentProcessId":7,"hostProcessId":4042277,"hostThreadId":4042278,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"sendto","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.76.1.221"},{"name":"dst","type":"const char*","value":"10.72.16.10"},{"name":"src_port","type":"u16","value":38295},{"name":"dst_port","type":"u16","value":53},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":38806,"QR":0,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":0,"Z":0,"responseCode":"no error","QDCount":1,"ANCount":0,"NSCount":0,"ARCount":0,"questions":[{"name":"one.lt.us-central1-c.c.engineering-test-353509.internal","type":"A","class":"IN"}],"answers":[],"authorities":[],"additionals":[]}}]} 42 kvisord-h9fnp kvisord {"timestamp":1684850284086852997,"threadStartTime":1684850284078158746,"processorId":0,"processId":16,"cgroupId":446170,"threadId":17,"parentProcessId":7,"hostProcessId":4042277,"hostThreadId":4042278,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"sendto","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.76.1.221"},{"name":"dst","type":"const char*","value":"10.72.16.10"},{"name":"src_port","type":"u16","value":38295},{"name":"dst_port","type":"u16","value":53},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":39115,"QR":0,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":0,"Z":0,"responseCode":"no error","QDCount":1,"ANCount":0,"NSCount":0,"ARCount":0,"questions":[{"name":"one.lt.us-central1-c.c.engineering-test-353509.internal","type":"AAAA","class":"IN"}],"answers":[],"authorities":[],"additionals":[]}}]} 43 kvisord-h9fnp kvisord {"timestamp":1684850284090868067,"threadStartTime":1684850284078158746,"processorId":1,"processId":16,"cgroupId":446170,"threadId":17,"parentProcessId":7,"hostProcessId":4042277,"hostThreadId":4042278,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.72.16.10"},{"name":"dst","type":"const char*","value":"10.76.1.221"},{"name":"src_port","type":"u16","value":53},{"name":"dst_port","type":"u16","value":38295},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":39115,"QR":1,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":1,"Z":0,"responseCode":"non-existent domain","QDCount":1,"ANCount":0,"NSCount":1,"ARCount":0,"questions":[{"name":"one.lt.us-central1-c.c.engineering-test-353509.internal","type":"AAAA","class":"IN"}],"answers":[],"authorities":[{"name":"internal","type":"SOA","class":"IN","TTL":30,"IP":"","NS":"","CNAME":"","PTR":"","TXTs":null,"SOA":{"MName":"ns.us-central1.gcedns-prod.internal","RName":"cloud-dns-hostmaster.google.com","serial":2015030600,"refresh":7200,"retry":3600,"expire":24796800,"minimum":5},"SRV":{"priority":0,"weight":0,"port":0,"name":""},"MX":{"preference":0,"name":""},"OPT":[],"URI":{"priority":0,"weight":0,"target":""},"TXT":""}],"additionals":[]}}]} 44 kvisord-h9fnp kvisord {"timestamp":1684850284094442222,"threadStartTime":1684850284078158746,"processorId":1,"processId":16,"cgroupId":446170,"threadId":17,"parentProcessId":7,"hostProcessId":4042277,"hostThreadId":4042278,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.72.16.10"},{"name":"dst","type":"const char*","value":"10.76.1.221"},{"name":"src_port","type":"u16","value":53},{"name":"dst_port","type":"u16","value":38295},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":38806,"QR":1,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":1,"Z":0,"responseCode":"non-existent domain","QDCount":1,"ANCount":0,"NSCount":1,"ARCount":0,"questions":[{"name":"one.lt.us-central1-c.c.engineering-test-353509.internal","type":"A","class":"IN"}],"answers":[],"authorities":[{"name":"internal","type":"SOA","class":"IN","TTL":30,"IP":"","NS":"","CNAME":"","PTR":"","TXTs":null,"SOA":{"MName":"ns.us-central1.gcedns-prod.internal","RName":"cloud-dns-hostmaster.google.com","serial":2015030600,"refresh":7200,"retry":3600,"expire":24796800,"minimum":5},"SRV":{"priority":0,"weight":0,"port":0,"name":""},"MX":{"preference":0,"name":""},"OPT":[],"URI":{"priority":0,"weight":0,"target":""},"TXT":""}],"additionals":[]}}]} 45 kvisord-h9fnp kvisord {"timestamp":1684850284094674529,"threadStartTime":1684850284078158746,"processorId":1,"processId":16,"cgroupId":446170,"threadId":17,"parentProcessId":7,"hostProcessId":4042277,"hostThreadId":4042278,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"sendto","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.76.1.221"},{"name":"dst","type":"const char*","value":"10.72.16.10"},{"name":"src_port","type":"u16","value":48820},{"name":"dst_port","type":"u16","value":53},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":31706,"QR":0,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":0,"Z":0,"responseCode":"no error","QDCount":1,"ANCount":0,"NSCount":0,"ARCount":0,"questions":[{"name":"one.lt.c.engineering-test-353509.internal","type":"A","class":"IN"}],"answers":[],"authorities":[],"additionals":[]}}]} 46 kvisord-h9fnp kvisord {"timestamp":1684850284095172403,"threadStartTime":1684850284078158746,"processorId":1,"processId":16,"cgroupId":446170,"threadId":17,"parentProcessId":7,"hostProcessId":4042277,"hostThreadId":4042278,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"sendto","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.76.1.221"},{"name":"dst","type":"const char*","value":"10.72.16.10"},{"name":"src_port","type":"u16","value":48820},{"name":"dst_port","type":"u16","value":53},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":32030,"QR":0,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":0,"Z":0,"responseCode":"no error","QDCount":1,"ANCount":0,"NSCount":0,"ARCount":0,"questions":[{"name":"one.lt.c.engineering-test-353509.internal","type":"AAAA","class":"IN"}],"answers":[],"authorities":[],"additionals":[]}}]} 47 kvisord-h9fnp kvisord {"timestamp":1684850284098770566,"threadStartTime":1684850284078158746,"processorId":1,"processId":16,"cgroupId":446170,"threadId":17,"parentProcessId":7,"hostProcessId":4042277,"hostThreadId":4042278,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.72.16.10"},{"name":"dst","type":"const char*","value":"10.76.1.221"},{"name":"src_port","type":"u16","value":53},{"name":"dst_port","type":"u16","value":48820},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":31706,"QR":1,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":1,"Z":0,"responseCode":"non-existent domain","QDCount":1,"ANCount":0,"NSCount":1,"ARCount":0,"questions":[{"name":"one.lt.c.engineering-test-353509.internal","type":"A","class":"IN"}],"answers":[],"authorities":[{"name":"internal","type":"SOA","class":"IN","TTL":30,"IP":"","NS":"","CNAME":"","PTR":"","TXTs":null,"SOA":{"MName":"ns.global.gcedns-prod.internal","RName":"cloud-dns-hostmaster.google.com","serial":2015030600,"refresh":7200,"retry":3600,"expire":24796800,"minimum":5},"SRV":{"priority":0,"weight":0,"port":0,"name":""},"MX":{"preference":0,"name":""},"OPT":[],"URI":{"priority":0,"weight":0,"target":""},"TXT":""}],"additionals":[]}}]} 48 kvisord-h9fnp kvisord {"timestamp":1684850284099517812,"threadStartTime":1684850284078158746,"processorId":1,"processId":16,"cgroupId":446170,"threadId":17,"parentProcessId":7,"hostProcessId":4042277,"hostThreadId":4042278,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.72.16.10"},{"name":"dst","type":"const char*","value":"10.76.1.221"},{"name":"src_port","type":"u16","value":53},{"name":"dst_port","type":"u16","value":48820},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":32030,"QR":1,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":1,"Z":0,"responseCode":"non-existent domain","QDCount":1,"ANCount":0,"NSCount":1,"ARCount":0,"questions":[{"name":"one.lt.c.engineering-test-353509.internal","type":"AAAA","class":"IN"}],"answers":[],"authorities":[{"name":"internal","type":"SOA","class":"IN","TTL":30,"IP":"","NS":"","CNAME":"","PTR":"","TXTs":null,"SOA":{"MName":"ns.global.gcedns-prod.internal","RName":"cloud-dns-hostmaster.google.com","serial":2015030600,"refresh":7200,"retry":3600,"expire":24796800,"minimum":5},"SRV":{"priority":0,"weight":0,"port":0,"name":""},"MX":{"preference":0,"name":""},"OPT":[],"URI":{"priority":0,"weight":0,"target":""},"TXT":""}],"additionals":[]}}]} 49 kvisord-h9fnp kvisord {"timestamp":1684850284099931348,"threadStartTime":1684850284078158746,"processorId":1,"processId":16,"cgroupId":446170,"threadId":17,"parentProcessId":7,"hostProcessId":4042277,"hostThreadId":4042278,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"sendto","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.76.1.221"},{"name":"dst","type":"const char*","value":"10.72.16.10"},{"name":"src_port","type":"u16","value":44123},{"name":"dst_port","type":"u16","value":53},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":26259,"QR":0,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":0,"Z":0,"responseCode":"no error","QDCount":1,"ANCount":0,"NSCount":0,"ARCount":0,"questions":[{"name":"one.lt.google.internal","type":"A","class":"IN"}],"answers":[],"authorities":[],"additionals":[]}}]} 50 kvisord-h9fnp kvisord {"timestamp":1684850284099991391,"threadStartTime":1684850284078158746,"processorId":1,"processId":16,"cgroupId":446170,"threadId":17,"parentProcessId":7,"hostProcessId":4042277,"hostThreadId":4042278,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"sendto","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.76.1.221"},{"name":"dst","type":"const char*","value":"10.72.16.10"},{"name":"src_port","type":"u16","value":44123},{"name":"dst_port","type":"u16","value":53},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":26625,"QR":0,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":0,"Z":0,"responseCode":"no error","QDCount":1,"ANCount":0,"NSCount":0,"ARCount":0,"questions":[{"name":"one.lt.google.internal","type":"AAAA","class":"IN"}],"answers":[],"authorities":[],"additionals":[]}}]} 51 kvisord-h9fnp kvisord {"timestamp":1684850284106723285,"threadStartTime":1684850284078158746,"processorId":1,"processId":16,"cgroupId":446170,"threadId":17,"parentProcessId":7,"hostProcessId":4042277,"hostThreadId":4042278,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.72.16.10"},{"name":"dst","type":"const char*","value":"10.76.1.221"},{"name":"src_port","type":"u16","value":53},{"name":"dst_port","type":"u16","value":44123},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":26625,"QR":1,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":1,"Z":0,"responseCode":"non-existent domain","QDCount":1,"ANCount":0,"NSCount":1,"ARCount":0,"questions":[{"name":"one.lt.google.internal","type":"AAAA","class":"IN"}],"answers":[],"authorities":[{"name":"internal","type":"SOA","class":"IN","TTL":30,"IP":"","NS":"","CNAME":"","PTR":"","TXTs":null,"SOA":{"MName":"ns.global.gcedns-prod.internal","RName":"cloud-dns-hostmaster.google.com","serial":2015030600,"refresh":7200,"retry":3600,"expire":24796800,"minimum":5},"SRV":{"priority":0,"weight":0,"port":0,"name":""},"MX":{"preference":0,"name":""},"OPT":[],"URI":{"priority":0,"weight":0,"target":""},"TXT":""}],"additionals":[]}}]} 52 kvisord-h9fnp kvisord {"timestamp":1684850284106841019,"threadStartTime":1684850284078158746,"processorId":1,"processId":16,"cgroupId":446170,"threadId":17,"parentProcessId":7,"hostProcessId":4042277,"hostThreadId":4042278,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.72.16.10"},{"name":"dst","type":"const char*","value":"10.76.1.221"},{"name":"src_port","type":"u16","value":53},{"name":"dst_port","type":"u16","value":44123},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":26259,"QR":1,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":1,"Z":0,"responseCode":"non-existent domain","QDCount":1,"ANCount":0,"NSCount":1,"ARCount":0,"questions":[{"name":"one.lt.google.internal","type":"A","class":"IN"}],"answers":[],"authorities":[{"name":"internal","type":"SOA","class":"IN","TTL":30,"IP":"","NS":"","CNAME":"","PTR":"","TXTs":null,"SOA":{"MName":"ns.global.gcedns-prod.internal","RName":"cloud-dns-hostmaster.google.com","serial":2015030600,"refresh":7200,"retry":3600,"expire":24796800,"minimum":5},"SRV":{"priority":0,"weight":0,"port":0,"name":""},"MX":{"preference":0,"name":""},"OPT":[],"URI":{"priority":0,"weight":0,"target":""},"TXT":""}],"additionals":[]}}]} 53 kvisord-h9fnp kvisord {"timestamp":1684850284106953087,"threadStartTime":1684850284078158746,"processorId":1,"processId":16,"cgroupId":446170,"threadId":17,"parentProcessId":7,"hostProcessId":4042277,"hostThreadId":4042278,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"sendto","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.76.1.221"},{"name":"dst","type":"const char*","value":"10.72.16.10"},{"name":"src_port","type":"u16","value":38581},{"name":"dst_port","type":"u16","value":53},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":16248,"QR":0,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":0,"Z":0,"responseCode":"no error","QDCount":1,"ANCount":0,"NSCount":0,"ARCount":0,"questions":[{"name":"one.lt","type":"A","class":"IN"}],"answers":[],"authorities":[],"additionals":[]}}]} 54 kvisord-h9fnp kvisord {"timestamp":1684850284107012549,"threadStartTime":1684850284078158746,"processorId":1,"processId":16,"cgroupId":446170,"threadId":17,"parentProcessId":7,"hostProcessId":4042277,"hostThreadId":4042278,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"sendto","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.76.1.221"},{"name":"dst","type":"const char*","value":"10.72.16.10"},{"name":"src_port","type":"u16","value":38581},{"name":"dst_port","type":"u16","value":53},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":16445,"QR":0,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":0,"Z":0,"responseCode":"no error","QDCount":1,"ANCount":0,"NSCount":0,"ARCount":0,"questions":[{"name":"one.lt","type":"AAAA","class":"IN"}],"answers":[],"authorities":[],"additionals":[]}}]} 55 kvisord-h9fnp kvisord {"timestamp":1684850284242164329,"threadStartTime":1684850284078158746,"processorId":0,"processId":16,"cgroupId":446170,"threadId":17,"parentProcessId":7,"hostProcessId":4042277,"hostThreadId":4042278,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.72.16.10"},{"name":"dst","type":"const char*","value":"10.76.1.221"},{"name":"src_port","type":"u16","value":53},{"name":"dst_port","type":"u16","value":38581},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":16248,"QR":1,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":1,"Z":0,"responseCode":"no error","QDCount":1,"ANCount":2,"NSCount":0,"ARCount":0,"questions":[{"name":"one.lt","type":"A","class":"IN"}],"answers":[{"name":"one.lt","type":"A","class":"IN","TTL":30,"IP":"172.67.189.228","NS":"","CNAME":"","PTR":"","TXTs":null,"SOA":{"MName":"","RName":"","serial":0,"refresh":0,"retry":0,"expire":0,"minimum":0},"SRV":{"priority":0,"weight":0,"port":0,"name":""},"MX":{"preference":0,"name":""},"OPT":[],"URI":{"priority":0,"weight":0,"target":""},"TXT":""},{"name":"one.lt","type":"A","class":"IN","TTL":30,"IP":"104.21.10.35","NS":"","CNAME":"","PTR":"","TXTs":null,"SOA":{"MName":"","RName":"","serial":0,"refresh":0,"retry":0,"expire":0,"minimum":0},"SRV":{"priority":0,"weight":0,"port":0,"name":""},"MX":{"preference":0,"name":""},"OPT":[],"URI":{"priority":0,"weight":0,"target":""},"TXT":""}],"authorities":[],"additionals":[]}}]} 56 kvisord-h9fnp kvisord {"timestamp":1684850284255430399,"threadStartTime":1684850284078158746,"processorId":0,"processId":16,"cgroupId":446170,"threadId":17,"parentProcessId":7,"hostProcessId":4042277,"hostThreadId":4042278,"hostParentProcessId":4010753,"userId":100,"mountNamespace":4026533883,"pidNamespace":4026533884,"processName":"curl","hostName":"curl","container":{"id":"aacbfb293ffd055662f4025bf20ce6a16f3061be761893e9a978d78f1be0e766"},"eventId":"2006","eventName":"net_packet_dns","matchedPolicies":[""],"argsNum":5,"returnValue":0,"syscall":"","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"args":[{"name":"src","type":"const char*","value":"10.72.16.10"},{"name":"dst","type":"const char*","value":"10.76.1.221"},{"name":"src_port","type":"u16","value":53},{"name":"dst_port","type":"u16","value":38581},{"name":"proto_dns","type":"trace.ProtoDNS","value":{"ID":16445,"QR":1,"opCode":"query","AA":0,"TC":0,"RD":1,"RA":1,"Z":0,"responseCode":"no error","QDCount":1,"ANCount":2,"NSCount":0,"ARCount":0,"questions":[{"name":"one.lt","type":"AAAA","class":"IN"}],"answers":[{"name":"one.lt","type":"AAAA","class":"IN","TTL":30,"IP":"2606:4700:3035::6815:a23","NS":"","CNAME":"","PTR":"","TXTs":null,"SOA":{"MName":"","RName":"","serial":0,"refresh":0,"retry":0,"expire":0,"minimum":0},"SRV":{"pri