-
**Describe the bug**
Starting from a thread we cannot correctly traverse its ancestors for 2 main reasons:
* We populate the thread info in an inconsistent way. More in detail the `ptid` of a th…
-
Metadatas are empty for %user.name %user.loginuid %user.uid in a rule detecting SSH connections.
Also at the first occurrence, proc.cmdline is empty, then not
rule lies in `falco_local_rul…
-
I have built sysdig from source on my platform and when tried to running few example commands as given here - https://github.com/draios/sysdig/wiki/Sysdig-Examples , all the commands listed here work …
-
**Describe the bug**
I want to test if falco can capture the `fchownat` syscall in my enviroment, here is the thing, If I set the condition
``` condition: container.id != host and evt.type in (f…
-
## Scheduled to happen: ~2023-06-07
During the community call of 2023-05-17 I proposed myself as a release manager, and together with the other maintainers we plan to release v0.35 as soon as possi…
-
**Describe the bug**
Noticed segfaults when running Falco. These segfaults seem to be intermittent and not very frequent.
Tried to enable log-level debug to figure out the issue, but that wa…
-
{"comm":"postgres","container_id":"cf6c2ebecb20","content_key":"","dnat_ip":"","dnat_port":"-1","dns_domain":"","dns_id":"0","dns_ip":"","dns_rcode":"0","dst_container_id":"cf6c2ebecb20","dst_ip":"172…
-
**Describe the bug**
When starting falco on EKS with:
```
- '--k8s-node'
- $(FALCO_K8S_NODE_NAME)
```
we've experienced **whole DaemonSet failures** (all new pods failing t…
-
**Motivation**
Plugins can support [the field extraction capability](https://falco.org/docs/plugins/#field-extraction-capability) that allow them to add new fields in the engine that can be used in…
-
**Motivation**
Support for "Falco native resource utilization metrics" is high up on the wish list of SREs I have the pleasure to work with.
While many end users sustaining a large deployment alre…