search

aquasecurity / tracee

Linux Runtime Security and Forensics using eBPF
https://aquasecurity.github.io/tracee/latest
Apache License 2.0
3.5k stars 406 forks source link

Kubernetes information missing #4181

Open jeason81 opened 2 months ago

jeason81 commented 2 months ago

Description

I am using the Vagrantfile located within this repo to create a test VM to deploy Tracee (using the provided helm charts). Everything seems to work but I have noticed that the Kubernetes information is missing from the output. I see "kubernetes":{} for every entry. I am using the -s container option to ensure I am scoped properly and I do see that the container ID is reported and so is containerStarted. Strangely, other container information is not present, such as the container name, tag, or digest.

Output of tracee version:

~ # ./tracee version
Tracee version: v0.21.0

Output of uname -a:

Linux vagrant 5.15.0-92-generic #102-Ubuntu SMP Wed Jan 10 09:37:39 UTC 2024 aarch64 aarch64 aarch64 GNU/Linux

Additional details

I am using a M1 MacBook Pro with Parallels installed. Vagrant is configured to use Parallels and both the Mac and Parallels have all the latest updates.

To test this, I monitored for execve and logged into the tracee container. I then ran cat /etc/os-release, which can be seen in the logs below. However, the container information is still limited, and the Kubernetes information is still empty.

~ # ./tracee-ebpf -s container -o json
{"timestamp":1720568462496316727,"threadStartTime":1720568462486304091,"processorId":0,"processId":1046,"cgroupId":10781,"threadId":1046,"parentProcessId":0,"hostProcessId":33852,"hostThreadId":33852,"hostParentProcessId":33841,"userId":999,"mountNamespace":4026532574,"pidNamespace":4026532575,"processName":"runc:[2:INIT]","executable":{"path":""},"hostName":"calico-kube-con","containerId":"8c504eec51aa1f583bf9c3d50381f715c170a5834060938ecf02ec23703c792b","container":{"id":"8c504eec51aa1f583bf9c3d50381f715c170a5834060938ecf02ec23703c792b"},"kubernetes":{},"eventId":"221","eventName":"execve","matchedPolicies":[""],"argsNum":2,"returnValue":0,"syscall":"execve","stackAddresses":null,"contextFlags":{"containerStarted":true,"isCompat":false},"threadEntityId":3112034781,"processEntityId":3112034781,"parentEntityId":4042129014,"args":[{"name":"pathname","type":"const char*","value":"/usr/bin/check-status"},{"name":"argv","type":"const char*const*","value":["/usr/bin/check-status","-r"]},{"name":"envp","type":"const char*const*","value":null}]}
{"timestamp":1720568463331797017,"threadStartTime":1720568463327110275,"processorId":1,"processId":1757,"cgroupId":11012,"threadId":1757,"parentProcessId":0,"hostProcessId":33912,"hostThreadId":33912,"hostParentProcessId":33877,"userId":0,"mountNamespace":4026532580,"pidNamespace":4026532581,"processName":"runc:[2:INIT]","executable":{"path":""},"hostName":"vagrant","containerId":"a0b2c095b98c7cce32778a1948e189c2cabc8452288fa31ecc83161c6f1fb2a4","container":{"id":"a0b2c095b98c7cce32778a1948e189c2cabc8452288fa31ecc83161c6f1fb2a4"},"kubernetes":{},"eventId":"221","eventName":"execve","matchedPolicies":[""],"argsNum":2,"returnValue":0,"syscall":"execve","stackAddresses":null,"contextFlags":{"containerStarted":true,"isCompat":false},"threadEntityId":3782647749,"processEntityId":3782647749,"parentEntityId":3854345385,"args":[{"name":"pathname","type":"const char*","value":"/bin/calico-node"},{"name":"argv","type":"const char*const*","value":["/bin/calico-node","-felix-live"]},{"name":"envp","type":"const char*const*","value":null}]}
{"timestamp":1720568465134905642,"threadStartTime":1720568465134733634,"processorId":0,"processId":1767,"cgroupId":11012,"threadId":1767,"parentProcessId":62,"hostProcessId":33968,"hostThreadId":33968,"hostParentProcessId":17656,"userId":0,"mountNamespace":4026532580,"pidNamespace":4026532581,"processName":"calico-node","executable":{"path":""},"hostName":"vagrant","containerId":"a0b2c095b98c7cce32778a1948e189c2cabc8452288fa31ecc83161c6f1fb2a4","container":{"id":"a0b2c095b98c7cce32778a1948e189c2cabc8452288fa31ecc83161c6f1fb2a4"},"kubernetes":{},"eventId":"221","eventName":"execve","matchedPolicies":[""],"argsNum":2,"returnValue":0,"syscall":"execve","stackAddresses":null,"contextFlags":{"containerStarted":true,"isCompat":false},"threadEntityId":2800210251,"processEntityId":2800210251,"parentEntityId":633799842,"args":[{"name":"pathname","type":"const char*","value":"/usr/sbin/ipset"},{"name":"argv","type":"const char*const*","value":["ipset","list"]},{"name":"envp","type":"const char*const*","value":null}]}
{"timestamp":1720568466147818757,"threadStartTime":1720568466146355153,"processorId":1,"processId":33969,"cgroupId":13355,"threadId":33969,"parentProcessId":33704,"hostProcessId":33969,"hostThreadId":33969,"hostParentProcessId":33704,"userId":0,"mountNamespace":4026533021,"pidNamespace":4026531836,"processName":"sh","executable":{"path":""},"hostName":"tracee-9pc7n","containerId":"716a83ccdf66468670a7d14959e30b2a2f0ec5a8e4eb2705e9f9f3998d3a44ce","container":{"id":"716a83ccdf66468670a7d14959e30b2a2f0ec5a8e4eb2705e9f9f3998d3a44ce"},"kubernetes":{},"eventId":"221","eventName":"execve","matchedPolicies":[""],"argsNum":2,"returnValue":0,"syscall":"execve","stackAddresses":null,"contextFlags":{"containerStarted":true,"isCompat":false},"threadEntityId":430097823,"processEntityId":430097823,"parentEntityId":2214331175,"args":[{"name":"pathname","type":"const char*","value":"/bin/cat"},{"name":"argv","type":"const char*const*","value":["cat","/etc/os-release"]},{"name":"envp","type":"const char*const*","value":null}]}
{"timestamp":1720568467133745035,"threadStartTime":1720568467127669899,"processorId":1,"processId":1768,"cgroupId":11012,"threadId":1768,"parentProcessId":0,"hostProcessId":33979,"hostThreadId":33979,"hostParentProcessId":33970,"userId":0,"mountNamespace":4026532580,"pidNamespace":4026532581,"processName":"runc:[2:INIT]","executable":{"path":""},"hostName":"vagrant","containerId":"a0b2c095b98c7cce32778a1948e189c2cabc8452288fa31ecc83161c6f1fb2a4","container":{"id":"a0b2c095b98c7cce32778a1948e189c2cabc8452288fa31ecc83161c6f1fb2a4"},"kubernetes":{},"eventId":"221","eventName":"execve","matchedPolicies":[""],"argsNum":2,"returnValue":0,"syscall":"execve","stackAddresses":null,"contextFlags":{"containerStarted":true,"isCompat":false},"threadEntityId":231537013,"processEntityId":231537013,"parentEntityId":1634297059,"args":[{"name":"pathname","type":"const char*","value":"/bin/calico-node"},{"name":"argv","type":"const char*const*","value":["/bin/calico-node","-felix-ready"]},{"name":"envp","type":"const char*const*","value":null}]}
{"timestamp":1720568467933533524,"threadStartTime":1720568467929433098,"processorId":1,"processId":1055,"cgroupId":10781,"threadId":1055,"parentProcessId":0,"hostProcessId":34001,"hostThreadId":34001,"hostParentProcessId":33991,"userId":999,"mountNamespace":4026532574,"pidNamespace":4026532575,"processName":"runc:[2:INIT]","executable":{"path":""},"hostName":"calico-kube-con","containerId":"8c504eec51aa1f583bf9c3d50381f715c170a5834060938ecf02ec23703c792b","container":{"id":"8c504eec51aa1f583bf9c3d50381f715c170a5834060938ecf02ec23703c792b"},"kubernetes":{},"eventId":"221","eventName":"execve","matchedPolicies":[""],"argsNum":2,"returnValue":0,"syscall":"execve","stackAddresses":null,"contextFlags":{"containerStarted":true,"isCompat":false},"threadEntityId":667862650,"processEntityId":667862650,"parentEntityId":1807974396,"args":[{"name":"pathname","type":"const char*","value":"/usr/bin/check-status"},{"name":"argv","type":"const char*const*","value":["/usr/bin/check-status","-l"]},{"name":"envp","type":"const char*const*","value":null}]}
NDStrahilevitz commented 2 months ago

It seems that the container enrichment isn't working in general on your instance. Could you print the startup debug logs using tracee --log debug? This will tell us which enrichers are registering (or failing to) on your tracee.

jeason81 commented 1 month ago

Sure. Here is the output with the --log debug parameter set.

~ # ./tracee-ebpf -s container -o json --log debug
{"L":"DEBUG","T":"2024-07-10T19:46:24.655Z","M":"OSInfo","ID":"ubuntu","ID_LIKE":"debian","KERNEL_RELEASE":"5.15.0-92-generic","ARCH":"arm64","PRETTY_NAME":"\"Ubuntu 22.04.3 LTS\"","VERSION_ID":"\"22.04\"","VERSION":"\"22.04.3 LTS (Jammy Jellyfish)\"","VERSION_CODENAME":"jammy","origin":"urfave:pkg/cmd/urfave/urfave.go:59","calls":"GetTraceeRunner() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.655Z","M":"OSInfo","lockdown":"open /sys/kernel/security/lockdown: no such file or directory","origin":"urfave:pkg/cmd/urfave/urfave.go:143","calls":"GetTraceeRunner() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.655Z","M":"OSInfo","security_lockdown":"","origin":"urfave:pkg/cmd/urfave/urfave.go:149","calls":"GetTraceeRunner() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"WARN","T":"2024-07-10T19:46:24.655Z","M":"KConfig: could not check enabled kconfig features","error":"could not read /boot/config-5.15.0-92-generic: stat /boot/config-5.15.0-92-generic: no such file or directory"}
{"L":"WARN","T":"2024-07-10T19:46:24.655Z","M":"KConfig: assuming kconfig values, might have unexpected behavior"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.669Z","M":"Unpacked CO:RE bpf object file into memory","origin":"initialize:pkg/cmd/initialize/bpfobject.go:76","calls":"unpackCOREBinary() < BpfObject() < GetTraceeRunner() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.675Z","M":"Adding capabilities to EBPF ring","capability":[14,24],"origin":"capabilities:pkg/capabilities/capabilities.go:241","calls":"(*Capabilities).EBPFRingAdd() < (*Capabilities).initialize() < Initialize.func1() < (*Once).doSlow() < (*Once).Do() < Initialize() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.676Z","M":"Paranoid: Value in /proc/sys/kernel/perf_event_paranoid is > 2","origin":"capabilities:pkg/capabilities/capabilities.go:113","calls":"(*Capabilities).initialize() < Initialize.func1() < (*Once).doSlow() < (*Once).Do() < Initialize() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.676Z","M":"Paranoid: Tracee needs CAP_SYS_ADMIN instead of CAP_BPF + CAP_PERFMON","origin":"capabilities:pkg/capabilities/capabilities.go:114","calls":"(*Capabilities).initialize() < Initialize.func1() < (*Once).doSlow() < (*Once).Do() < Initialize() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.676Z","M":"Paranoid: To change that behavior set perf_event_paranoid to 2 or less.","origin":"capabilities:pkg/capabilities/capabilities.go:115","calls":"(*Capabilities).initialize() < Initialize.func1() < (*Once).doSlow() < (*Once).Do() < Initialize() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.676Z","M":"Adding capabilities to EBPF ring","capability":[21],"origin":"capabilities:pkg/capabilities/capabilities.go:241","calls":"(*Capabilities).EBPFRingAdd() < (*Capabilities).initialize() < Initialize.func1() < (*Once).doSlow() < (*Once).Do() < Initialize() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.676Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).initialize() < Initialize.func1() < (*Once).doSlow() < (*Once).Do() < Initialize() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.676Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.676Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.676Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.676Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.677Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.677Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.677Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.677Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.677Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.677Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.678Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.678Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.678Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.678Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.678Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.678Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.679Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.679Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.679Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.679Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.679Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.679Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.679Z","M":"Adding capabilities to base ring","capability":[12],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.679Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.679Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.680Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.680Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.680Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.680Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.680Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.680Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.680Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.680Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.680Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.680Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.680Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.681Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.681Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.681Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.682Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.682Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.682Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.682Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.682Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.683Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.683Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.683Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.683Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.684Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.684Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.684Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.684Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.684Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.684Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.684Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.685Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.685Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.685Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.685Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.685Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.685Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.685Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.685Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.685Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.686Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.686Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.686Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.686Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.686Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.686Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.686Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.686Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.686Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.687Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.687Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.687Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.687Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.687Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.687Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.687Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.687Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.687Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.687Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.687Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.687Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.688Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.688Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.688Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.688Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.688Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.688Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.688Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.688Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.688Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.688Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.688Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.688Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.689Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.689Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.689Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.689Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.689Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.689Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.689Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.689Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.689Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.689Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.689Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.690Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.690Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.690Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.690Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.690Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.690Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.690Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.694Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.694Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.694Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.695Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.695Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.695Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.695Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.695Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.695Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.695Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.695Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.695Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.695Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.695Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.695Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.696Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.696Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.696Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.696Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.696Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.696Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.697Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.697Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.697Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.697Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.697Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.697Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.697Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.697Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.697Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.697Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Adding capabilities to base ring","capability":null,"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Removing capabilities from the base ring","capability":null,"origin":"capabilities:pkg/capabilities/capabilities.go:273","calls":"(*Capabilities).BaseRingRemove() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingRemove() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingRemove() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Enabling cap","cap":"cap_sys_ptrace","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Enabling cap","cap":"cap_dac_override","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.731Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.731Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.733Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*MountHostOnce).Mount() < NewMountHostOnce() < (*CgroupV2).init() < NewCgroup() < NewCgroups() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.733Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*MountHostOnce).Mount() < NewMountHostOnce() < (*CgroupV2).init() < NewCgroup() < NewCgroups() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.733Z","M":"Enabling cap","cap":"cap_sys_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*MountHostOnce).Mount() < NewMountHostOnce() < (*CgroupV2).init() < NewCgroup() < NewCgroups() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.733Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*MountHostOnce).Mount() < NewMountHostOnce() < (*CgroupV2).init() < NewCgroup() < NewCgroups() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.733Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*MountHostOnce).Mount() < NewMountHostOnce() < (*CgroupV2).init() < NewCgroup() < NewCgroups() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.734Z","M":"created mount object","managed":true,"source":"cgroup2","target":"/tmp/tracee808635390","fsType":"cgroup2","data":"","origin":"mount:pkg/mount/mount.go:74","calls":"NewMountHostOnce() < (*CgroupV2).init() < NewCgroup() < NewCgroups() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.743Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.743Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.743Z","M":"Enabling cap","cap":"cap_ipc_lock","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.743Z","M":"Enabling cap","cap":"cap_sys_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.743Z","M":"Enabling cap","cap":"cap_sys_resource","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.783Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.783Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.783Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.783Z","M":"Enabling cap","cap":"cap_syslog","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.784Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.860Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.861Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.861Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.861Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.861Z","M":"Enabling cap","cap":"cap_ipc_lock","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.861Z","M":"Enabling cap","cap":"cap_sys_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.861Z","M":"Enabling cap","cap":"cap_sys_resource","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:27.359Z","M":"KConfig: warning: assuming kconfig values, might have unexpected behavior","origin":"initialization:pkg/ebpf/initialization/kconfig.go:31","calls":"LoadKconfigValues() < (*Tracee).populateBPFMaps() < (*Tracee).initBPF() < (*Tracee).Init.func4() < (*Capabilities).EBPF() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:27.633Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:27.633Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:27.634Z","M":"Starting lkmSeekerRoutine goroutine","origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:27.635Z","M":"Stopped lkmSeekerRoutine goroutine","origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:27.635Z","M":"Starting hookedSyscallTable goroutine","origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:27.635Z","M":"Stopped hookedSyscallTable goroutine","origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:27.635Z","M":"Starting processLostEvents goroutine","origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:27.635Z","M":"Starting processBPFLogs goroutine","origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:27.635Z","M":"Starting handleEvents goroutine","origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:27.636Z","M":"Starting handleFileCaptures go routine","origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:27.636Z","M":"Tracee is ready callback","origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.292Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.297Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.297Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.297Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.297Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.297Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.297Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.297Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.297Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.297Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.297Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.297Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.297Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.304Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.304Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.309Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.309Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.309Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.309Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.309Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.309Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.309Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.309Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.309Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.309Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.309Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.309Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.309Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.313Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.313Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.313Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.313Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.314Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.315Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.315Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.315Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.315Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.315Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.315Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.316Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.316Z","M":"async enrich request in pipeline done","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.316Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.316Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"timestamp":1720640788286800305,"threadStartTime":1720640788285321843,"processorId":0,"processId":1028,"cgroupId":11014,"threadId":1028,"parentProcessId":50,"hostProcessId":23614,"hostThreadId":23614,"hostParentProcessId":15118,"userId":0,"mountNamespace":4026532311,"pidNamespace":4026532312,"processName":"ipset","executable":{"path":""},"hostName":"vagrant","containerId":"812eb489c260091e2e6e8a6d536be83e1b3e89b5cac8d5be1a0efc3102bfc8dc","container":{"id":"812eb489c260091e2e6e8a6d536be83e1b3e89b5cac8d5be1a0efc3102bfc8dc"},"kubernetes":{},"eventId":"714","eventName":"sched_process_exec","matchedPolicies":[""],"argsNum":15,"returnValue":0,"syscall":"execve","stackAddresses":null,"contextFlags":{"containerStarted":true,"isCompat":false},"threadEntityId":3152978287,"processEntityId":3152978287,"parentEntityId":2928910185,"args":[{"name":"cmdpath","type":"const char*","value":"/usr/sbin/ipset"},{"name":"pathname","type":"const char*","value":"/usr/sbin/ipset"},{"name":"dev","type":"dev_t","value":143},{"name":"inode","type":"unsigned long","value":920550},{"name":"ctime","type":"unsigned long","value":1720640432160038730},{"name":"inode_mode","type":"umode_t","value":33277},{"name":"interpreter_pathname","type":"const char*","value":"/usr/lib64/ld-2.28.so"},{"name":"interpreter_dev","type":"dev_t","value":143},{"name":"interpreter_inode","type":"unsigned long","value":920203},{"name":"interpreter_ctime","type":"unsigned long","value":1720640432008041827},{"name":"argv","type":"const char**","value":["ipset","list"]},{"name":"interp","type":"const char*","value":"/usr/sbin/ipset"},{"name":"stdin_type","type":"umode_t","value":8192},{"name":"stdin_path","type":"char*","value":"/dev/null"},{"name":"invoked_from_kernel","type":"int","value":0},{"name":"env","type":"const char**","value":null}]}
{"L":"DEBUG","T":"2024-07-10T19:46:28.448Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.458Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.461Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.461Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.461Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.461Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.461Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.461Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.461Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.461Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.461Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.461Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.461Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.461Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.461Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.461Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.462Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.462Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.462Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.462Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.462Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.462Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.462Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.462Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.462Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.462Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.462Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.462Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.462Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.462Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.462Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.462Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.462Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.462Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.463Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.466Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.466Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.466Z","M":"async enrich request in pipeline done","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.466Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.466Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.466Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.466Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"timestamp":1720640788446209213,"threadStartTime":1720640489579931588,"processorId":1,"processId":1,"cgroupId":10838,"threadId":13,"parentProcessId":0,"hostProcessId":14875,"hostThreadId":14962,"hostParentProcessId":14670,"userId":0,"mountNamespace":4026532335,"pidNamespace":4026532336,"processName":"coredns","executable":{"path":""},"hostName":"coredns-864597b","containerId":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594","container":{"id":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594"},"kubernetes":{},"eventId":"735","eventName":"security_socket_connect","matchedPolicies":[""],"argsNum":3,"returnValue":0,"syscall":"connect","stackAddresses":null,"contextFlags":{"containerStarted":true,"isCompat":false},"threadEntityId":314312491,"processEntityId":70140987,"parentEntityId":2096741702,"args":[{"name":"sockfd","type":"int","value":11},{"name":"type","type":"int","value":1},{"name":"remote_addr","type":"struct sockaddr*","value":{"sa_family":"AF_INET","sin_addr":"0.0.0.0","sin_port":"8080"}}]}
{"L":"DEBUG","T":"2024-07-10T19:46:28.469Z","M":"error picking address","error":"derive.pickIpAndPort: parse.ArgVal[...]: argument type is not of type string, is of type int32","origin":"ebpf:pkg/events/derive/net_tcp.go:22","calls":"(*Tracee).initDerivationTable.NetTCPConnect.func11() < deriveSingleEvent.func1() < deriveMultipleEvents.func1() < Table.DeriveEvent()"}
{"timestamp":1720640788447133090,"threadStartTime":1720640489178425772,"processorId":1,"processId":1,"cgroupId":10838,"threadId":8,"parentProcessId":0,"hostProcessId":14875,"hostThreadId":14931,"hostParentProcessId":14670,"userId":0,"mountNamespace":4026532335,"pidNamespace":4026532336,"processName":"coredns","executable":{"path":""},"hostName":"coredns-864597b","containerId":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594","container":{"id":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594"},"kubernetes":{},"eventId":"2010","eventName":"net_packet_http_request","matchedPolicies":[""],"argsNum":2,"returnValue":0,"syscall":"write","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"threadEntityId":1880178206,"processEntityId":70140987,"parentEntityId":2096741702,"args":[{"name":"metadata","type":"trace.PktMeta","value":{"src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":38878,"dst_port":8080,"protocol":6,"packet_len":144,"iface":"any"}},{"name":"http_request","type":"trace.ProtoHTTPRequest","value":{"method":"GET","protocol":"HTTP/1.1","host":":8080","uri_path":"/health","headers":{"Accept-Encoding":["gzip"],"User-Agent":["Go-http-client/1.1"]},"content_length":0}}]}
{"timestamp":1720640788447262674,"threadStartTime":1720640489178425772,"processorId":1,"processId":1,"cgroupId":10838,"threadId":8,"parentProcessId":0,"hostProcessId":14875,"hostThreadId":14931,"hostParentProcessId":14670,"userId":0,"mountNamespace":4026532335,"pidNamespace":4026532336,"processName":"coredns","executable":{"path":""},"hostName":"coredns-864597b","containerId":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594","container":{"id":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594"},"kubernetes":{},"eventId":"736","eventName":"security_socket_accept","matchedPolicies":[""],"argsNum":2,"returnValue":0,"syscall":"accept4","stackAddresses":null,"contextFlags":{"containerStarted":true,"isCompat":false},"threadEntityId":1880178206,"processEntityId":70140987,"parentEntityId":2096741702,"args":[{"name":"sockfd","type":"int","value":8},{"name":"local_addr","type":"struct sockaddr*","value":{"sa_family":"AF_INET6","sin6_addr":"::","sin6_flowinfo":"0","sin6_port":"8080","sin6_scopeid":"0"}}]}
{"timestamp":1720640788447395633,"threadStartTime":1720640489178425772,"processorId":1,"processId":1,"cgroupId":10838,"threadId":8,"parentProcessId":0,"hostProcessId":14875,"hostThreadId":14931,"hostParentProcessId":14670,"userId":0,"mountNamespace":4026532335,"pidNamespace":4026532336,"processName":"coredns","executable":{"path":""},"hostName":"coredns-864597b","containerId":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594","container":{"id":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594"},"kubernetes":{},"eventId":"736","eventName":"security_socket_accept","matchedPolicies":[""],"argsNum":2,"returnValue":0,"syscall":"accept4","stackAddresses":null,"contextFlags":{"containerStarted":true,"isCompat":false},"threadEntityId":1880178206,"processEntityId":70140987,"parentEntityId":2096741702,"args":[{"name":"sockfd","type":"int","value":8},{"name":"local_addr","type":"struct sockaddr*","value":{"sa_family":"AF_INET6","sin6_addr":"::","sin6_flowinfo":"0","sin6_port":"8080","sin6_scopeid":"0"}}]}
{"timestamp":1720640788447855592,"threadStartTime":1720640489078044651,"processorId":1,"processId":1,"cgroupId":10838,"threadId":1,"parentProcessId":0,"hostProcessId":14875,"hostThreadId":14931,"hostParentProcessId":14670,"userId":0,"mountNamespace":4026532335,"pidNamespace":4026532336,"processName":"coredns","executable":{"path":""},"hostName":"coredns-864597b","containerId":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594","container":{"id":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594"},"kubernetes":{},"eventId":"2011","eventName":"net_packet_http_response","matchedPolicies":[""],"argsNum":2,"returnValue":0,"syscall":"","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"threadEntityId":1101141590,"processEntityId":70140987,"parentEntityId":2096741702,"args":[{"name":"metadata","type":"trace.PktMeta","value":{"src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":8080,"dst_port":38878,"protocol":6,"packet_len":170,"iface":"any"}},{"name":"http_response","type":"trace.ProtoHTTPResponse","value":{"status":"200 OK","status_code":200,"protocol":"HTTP/1.1","headers":{"Content-Length":["2"],"Content-Type":["text/plain; charset=utf-8"],"Date":["Wed, 10 Jul 2024 19:46:28 GMT"]},"content_length":2}}]}
{"L":"DEBUG","T":"2024-07-10T19:46:29.179Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.179Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.182Z","M":"async enrich request in pipeline done","cgroup_id":10761,"origin":"::0","calls":""}
{"timestamp":1720640789178835777,"threadStartTime":1720640489146859932,"processorId":0,"processId":1,"cgroupId":10761,"threadId":8,"parentProcessId":0,"hostProcessId":14883,"hostThreadId":14924,"hostParentProcessId":14536,"userId":1001,"mountNamespace":4026532338,"pidNamespace":4026532339,"processName":"metrics-sidecar","executable":{"path":""},"hostName":"dashboard-metri","containerId":"f28801ca948ef54cd36aac174262e58e8711dcb4b5b5a0dea95b321ec5903cb6","container":{"id":"f28801ca948ef54cd36aac174262e58e8711dcb4b5b5a0dea95b321ec5903cb6"},"kubernetes":{},"eventId":"732","eventName":"security_inode_unlink","matchedPolicies":[""],"argsNum":4,"returnValue":0,"syscall":"unlinkat","stackAddresses":null,"contextFlags":{"containerStarted":true,"isCompat":false},"threadEntityId":99425328,"processEntityId":3296577463,"parentEntityId":2056650904,"args":[{"name":"pathname","type":"const char*","value":"/var/snap/microk8s/common/var/lib/kubelet/pods/34ea85b3-4ed9-4427-b165-f7975c36a248/volumes/kubernetes.io~empty-dir/tmp-volume/metrics.db-journal"},{"name":"inode","type":"unsigned long","value":930559},{"name":"dev","type":"dev_t","value":265289728},{"name":"ctime","type":"u64","value":1720640789170488924}]}
{"L":"DEBUG","T":"2024-07-10T19:46:29.449Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.449Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.449Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.450Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.450Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.450Z","M":"error picking address","error":"derive.pickIpAndPort: parse.ArgVal[...]: argument type is not of type string, is of type int32","origin":"ebpf:pkg/events/derive/net_tcp.go:22","calls":"(*Tracee).initDerivationTable.NetTCPConnect.func11() < deriveSingleEvent.func1() < deriveMultipleEvents.func1() < Table.DeriveEvent()"}
{"timestamp":1720640789446248021,"threadStartTime":1720640489078044651,"processorId":1,"processId":1,"cgroupId":10838,"threadId":1,"parentProcessId":0,"hostProcessId":14875,"hostThreadId":14875,"hostParentProcessId":14670,"userId":0,"mountNamespace":4026532335,"pidNamespace":4026532336,"processName":"coredns","executable":{"path":""},"hostName":"coredns-864597b","containerId":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594","container":{"id":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594"},"kubernetes":{},"eventId":"735","eventName":"security_socket_connect","matchedPolicies":[""],"argsNum":3,"returnValue":0,"syscall":"connect","stackAddresses":null,"contextFlags":{"containerStarted":true,"isCompat":false},"threadEntityId":70140987,"processEntityId":70140987,"parentEntityId":2096741702,"args":[{"name":"sockfd","type":"int","value":11},{"name":"type","type":"int","value":1},{"name":"remote_addr","type":"struct sockaddr*","value":{"sa_family":"AF_INET","sin_addr":"0.0.0.0","sin_port":"8080"}}]}
{"timestamp":1720640789447716691,"threadStartTime":1720640489178425772,"processorId":1,"processId":1,"cgroupId":10838,"threadId":8,"parentProcessId":0,"hostProcessId":14875,"hostThreadId":14931,"hostParentProcessId":14670,"userId":0,"mountNamespace":4026532335,"pidNamespace":4026532336,"processName":"coredns","executable":{"path":""},"hostName":"coredns-864597b","containerId":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594","container":{"id":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594"},"kubernetes":{},"eventId":"736","eventName":"security_socket_accept","matchedPolicies":[""],"argsNum":2,"returnValue":0,"syscall":"accept4","stackAddresses":null,"contextFlags":{"containerStarted":true,"isCompat":false},"threadEntityId":1880178206,"processEntityId":70140987,"parentEntityId":2096741702,"args":[{"name":"sockfd","type":"int","value":8},{"name":"local_addr","type":"struct sockaddr*","value":{"sa_family":"AF_INET6","sin6_addr":"::","sin6_flowinfo":"0","sin6_port":"8080","sin6_scopeid":"0"}}]}
{"timestamp":1720640789447860733,"threadStartTime":1720640489178425772,"processorId":1,"processId":1,"cgroupId":10838,"threadId":8,"parentProcessId":0,"hostProcessId":14875,"hostThreadId":14931,"hostParentProcessId":14670,"userId":0,"mountNamespace":4026532335,"pidNamespace":4026532336,"processName":"coredns","executable":{"path":""},"hostName":"coredns-864597b","containerId":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594","container":{"id":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594"},"kubernetes":{},"eventId":"736","eventName":"security_socket_accept","matchedPolicies":[""],"argsNum":2,"returnValue":0,"syscall":"accept4","stackAddresses":null,"contextFlags":{"containerStarted":true,"isCompat":false},"threadEntityId":1880178206,"processEntityId":70140987,"parentEntityId":2096741702,"args":[{"name":"sockfd","type":"int","value":8},{"name":"local_addr","type":"struct sockaddr*","value":{"sa_family":"AF_INET6","sin6_addr":"::","sin6_flowinfo":"0","sin6_port":"8080","sin6_scopeid":"0"}}]}
{"timestamp":1720640789448237859,"threadStartTime":1720640489178425772,"processorId":1,"processId":1,"cgroupId":10838,"threadId":8,"parentProcessId":0,"hostProcessId":14875,"hostThreadId":14931,"hostParentProcessId":14670,"userId":0,"mountNamespace":4026532335,"pidNamespace":4026532336,"processName":"coredns","executable":{"path":""},"hostName":"coredns-864597b","containerId":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594","container":{"id":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594"},"kubernetes":{},"eventId":"2010","eventName":"net_packet_http_request","matchedPolicies":[""],"argsNum":2,"returnValue":0,"syscall":"write","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"threadEntityId":1880178206,"processEntityId":70140987,"parentEntityId":2096741702,"args":[{"name":"metadata","type":"trace.PktMeta","value":{"src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":38894,"dst_port":8080,"protocol":6,"packet_len":144,"iface":"any"}},{"name":"http_request","type":"trace.ProtoHTTPRequest","value":{"method":"GET","protocol":"HTTP/1.1","host":":8080","uri_path":"/health","headers":{"Accept-Encoding":["gzip"],"User-Agent":["Go-http-client/1.1"]},"content_length":0}}]}
{"timestamp":1720640789448614985,"threadStartTime":1720640489178425772,"processorId":1,"processId":1,"cgroupId":10838,"threadId":8,"parentProcessId":0,"hostProcessId":14875,"hostThreadId":14931,"hostParentProcessId":14670,"userId":0,"mountNamespace":4026532335,"pidNamespace":4026532336,"processName":"coredns","executable":{"path":""},"hostName":"coredns-864597b","containerId":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594","container":{"id":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594"},"kubernetes":{},"eventId":"2011","eventName":"net_packet_http_response","matchedPolicies":[""],"argsNum":2,"returnValue":0,"syscall":"","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"threadEntityId":1880178206,"processEntityId":70140987,"parentEntityId":2096741702,"args":[{"name":"metadata","type":"trace.PktMeta","value":{"src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":8080,"dst_port":38894,"protocol":6,"packet_len":170,"iface":"any"}},{"name":"http_response","type":"trace.ProtoHTTPResponse","value":{"status":"200 OK","status_code":200,"protocol":"HTTP/1.1","headers":{"Content-Length":["2"],"Content-Type":["text/plain; charset=utf-8"],"Date":["Wed, 10 Jul 2024 19:46:29 GMT"]},"content_length":2}}]}
^C{"L":"DEBUG","T":"2024-07-10T19:46:30.048Z","M":"Stopped processBPFLogs goroutine","origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:30.048Z","M":"Stopped handleFileCaptures go routine","origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:30.049Z","M":"Stopped handleEvents goroutine","origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:30.050Z","M":"Stopped processLostEvents goroutine","origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:30.475Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*CgroupProbe).detach() < (*ProbeGroup).DetachAll() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:30.475Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*CgroupProbe).detach() < (*ProbeGroup).DetachAll() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:30.476Z","M":"Enabling cap","cap":"cap_ipc_lock","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*CgroupProbe).detach() < (*ProbeGroup).DetachAll() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:30.476Z","M":"Enabling cap","cap":"cap_sys_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*CgroupProbe).detach() < (*ProbeGroup).DetachAll() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:30.476Z","M":"Enabling cap","cap":"cap_sys_resource","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*CgroupProbe).detach() < (*ProbeGroup).DetachAll() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:30.477Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*CgroupProbe).detach() < (*ProbeGroup).DetachAll() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:30.478Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*CgroupProbe).detach() < (*ProbeGroup).DetachAll() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:30.591Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*CgroupProbe).detach() < (*ProbeGroup).DetachAll() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:30.591Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*CgroupProbe).detach() < (*ProbeGroup).DetachAll() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:30.592Z","M":"Enabling cap","cap":"cap_ipc_lock","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*CgroupProbe).detach() < (*ProbeGroup).DetachAll() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:30.592Z","M":"Enabling cap","cap":"cap_sys_resource","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*CgroupProbe).detach() < (*ProbeGroup).DetachAll() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:30.592Z","M":"Enabling cap","cap":"cap_sys_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*CgroupProbe).detach() < (*ProbeGroup).DetachAll() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:30.601Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*CgroupProbe).detach() < (*ProbeGroup).DetachAll() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:30.601Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*CgroupProbe).detach() < (*ProbeGroup).DetachAll() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:30.841Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*MountHostOnce).Umount() < (*CgroupV2).destroy() < (*Cgroups).Destroy() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:30.842Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*MountHostOnce).Umount() < (*CgroupV2).destroy() < (*Cgroups).Destroy() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:30.842Z","M":"Enabling cap","cap":"cap_sys_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*MountHostOnce).Umount() < (*CgroupV2).destroy() < (*Cgroups).Destroy() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:30.844Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*MountHostOnce).Umount() < (*CgroupV2).destroy() < (*Cgroups).Destroy() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:30.844Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*MountHostOnce).Umount() < (*CgroupV2).destroy() < (*Cgroups).Destroy() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
NDStrahilevitz commented 1 month ago

Could you try running this with the standard tracee binary? tracee-ebpf as a standalone binary is being deprecated and it is not as actively supported.