Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Kubernetes information missing #4181

Open
jeason81 opened this issue Jul 9, 2024 · 5 comments
Open

Kubernetes information missing #4181

jeason81 opened this issue Jul 9, 2024 · 5 comments
Assignees
@geyslan
Labels
kind/bug
Milestone
v0.23.0

Comments

@jeason81
Copy link

jeason81 commented Jul 9, 2024

Description

I am using the Vagrantfile located within this repo to create a test VM to deploy Tracee (using the provided helm charts). Everything seems to work but I have noticed that the Kubernetes information is missing from the output. I see "kubernetes":{} for every entry. I am using the -s container option to ensure I am scoped properly and I do see that the container ID is reported and so is containerStarted. Strangely, other container information is not present, such as the container name, tag, or digest.

Output of tracee version:

~ # ./tracee version
Tracee version: v0.21.0

Output of uname -a:

Linux vagrant 5.15.0-92-generic #102-Ubuntu SMP Wed Jan 10 09:37:39 UTC 2024 aarch64 aarch64 aarch64 GNU/Linux

Additional details

I am using a M1 MacBook Pro with Parallels installed. Vagrant is configured to use Parallels and both the Mac and Parallels have all the latest updates.

To test this, I monitored for execve and logged into the tracee container. I then ran cat /etc/os-release, which can be seen in the logs below. However, the container information is still limited, and the Kubernetes information is still empty.

~ # ./tracee-ebpf -s container -o json
{"timestamp":1720568462496316727,"threadStartTime":1720568462486304091,"processorId":0,"processId":1046,"cgroupId":10781,"threadId":1046,"parentProcessId":0,"hostProcessId":33852,"hostThreadId":33852,"hostParentProcessId":33841,"userId":999,"mountNamespace":4026532574,"pidNamespace":4026532575,"processName":"runc:[2:INIT]","executable":{"path":""},"hostName":"calico-kube-con","containerId":"8c504eec51aa1f583bf9c3d50381f715c170a5834060938ecf02ec23703c792b","container":{"id":"8c504eec51aa1f583bf9c3d50381f715c170a5834060938ecf02ec23703c792b"},"kubernetes":{},"eventId":"221","eventName":"execve","matchedPolicies":[""],"argsNum":2,"returnValue":0,"syscall":"execve","stackAddresses":null,"contextFlags":{"containerStarted":true,"isCompat":false},"threadEntityId":3112034781,"processEntityId":3112034781,"parentEntityId":4042129014,"args":[{"name":"pathname","type":"const char*","value":"/usr/bin/check-status"},{"name":"argv","type":"const char*const*","value":["/usr/bin/check-status","-r"]},{"name":"envp","type":"const char*const*","value":null}]}
{"timestamp":1720568463331797017,"threadStartTime":1720568463327110275,"processorId":1,"processId":1757,"cgroupId":11012,"threadId":1757,"parentProcessId":0,"hostProcessId":33912,"hostThreadId":33912,"hostParentProcessId":33877,"userId":0,"mountNamespace":4026532580,"pidNamespace":4026532581,"processName":"runc:[2:INIT]","executable":{"path":""},"hostName":"vagrant","containerId":"a0b2c095b98c7cce32778a1948e189c2cabc8452288fa31ecc83161c6f1fb2a4","container":{"id":"a0b2c095b98c7cce32778a1948e189c2cabc8452288fa31ecc83161c6f1fb2a4"},"kubernetes":{},"eventId":"221","eventName":"execve","matchedPolicies":[""],"argsNum":2,"returnValue":0,"syscall":"execve","stackAddresses":null,"contextFlags":{"containerStarted":true,"isCompat":false},"threadEntityId":3782647749,"processEntityId":3782647749,"parentEntityId":3854345385,"args":[{"name":"pathname","type":"const char*","value":"/bin/calico-node"},{"name":"argv","type":"const char*const*","value":["/bin/calico-node","-felix-live"]},{"name":"envp","type":"const char*const*","value":null}]}
{"timestamp":1720568465134905642,"threadStartTime":1720568465134733634,"processorId":0,"processId":1767,"cgroupId":11012,"threadId":1767,"parentProcessId":62,"hostProcessId":33968,"hostThreadId":33968,"hostParentProcessId":17656,"userId":0,"mountNamespace":4026532580,"pidNamespace":4026532581,"processName":"calico-node","executable":{"path":""},"hostName":"vagrant","containerId":"a0b2c095b98c7cce32778a1948e189c2cabc8452288fa31ecc83161c6f1fb2a4","container":{"id":"a0b2c095b98c7cce32778a1948e189c2cabc8452288fa31ecc83161c6f1fb2a4"},"kubernetes":{},"eventId":"221","eventName":"execve","matchedPolicies":[""],"argsNum":2,"returnValue":0,"syscall":"execve","stackAddresses":null,"contextFlags":{"containerStarted":true,"isCompat":false},"threadEntityId":2800210251,"processEntityId":2800210251,"parentEntityId":633799842,"args":[{"name":"pathname","type":"const char*","value":"/usr/sbin/ipset"},{"name":"argv","type":"const char*const*","value":["ipset","list"]},{"name":"envp","type":"const char*const*","value":null}]}
{"timestamp":1720568466147818757,"threadStartTime":1720568466146355153,"processorId":1,"processId":33969,"cgroupId":13355,"threadId":33969,"parentProcessId":33704,"hostProcessId":33969,"hostThreadId":33969,"hostParentProcessId":33704,"userId":0,"mountNamespace":4026533021,"pidNamespace":4026531836,"processName":"sh","executable":{"path":""},"hostName":"tracee-9pc7n","containerId":"716a83ccdf66468670a7d14959e30b2a2f0ec5a8e4eb2705e9f9f3998d3a44ce","container":{"id":"716a83ccdf66468670a7d14959e30b2a2f0ec5a8e4eb2705e9f9f3998d3a44ce"},"kubernetes":{},"eventId":"221","eventName":"execve","matchedPolicies":[""],"argsNum":2,"returnValue":0,"syscall":"execve","stackAddresses":null,"contextFlags":{"containerStarted":true,"isCompat":false},"threadEntityId":430097823,"processEntityId":430097823,"parentEntityId":2214331175,"args":[{"name":"pathname","type":"const char*","value":"/bin/cat"},{"name":"argv","type":"const char*const*","value":["cat","/etc/os-release"]},{"name":"envp","type":"const char*const*","value":null}]}
{"timestamp":1720568467133745035,"threadStartTime":1720568467127669899,"processorId":1,"processId":1768,"cgroupId":11012,"threadId":1768,"parentProcessId":0,"hostProcessId":33979,"hostThreadId":33979,"hostParentProcessId":33970,"userId":0,"mountNamespace":4026532580,"pidNamespace":4026532581,"processName":"runc:[2:INIT]","executable":{"path":""},"hostName":"vagrant","containerId":"a0b2c095b98c7cce32778a1948e189c2cabc8452288fa31ecc83161c6f1fb2a4","container":{"id":"a0b2c095b98c7cce32778a1948e189c2cabc8452288fa31ecc83161c6f1fb2a4"},"kubernetes":{},"eventId":"221","eventName":"execve","matchedPolicies":[""],"argsNum":2,"returnValue":0,"syscall":"execve","stackAddresses":null,"contextFlags":{"containerStarted":true,"isCompat":false},"threadEntityId":231537013,"processEntityId":231537013,"parentEntityId":1634297059,"args":[{"name":"pathname","type":"const char*","value":"/bin/calico-node"},{"name":"argv","type":"const char*const*","value":["/bin/calico-node","-felix-ready"]},{"name":"envp","type":"const char*const*","value":null}]}
{"timestamp":1720568467933533524,"threadStartTime":1720568467929433098,"processorId":1,"processId":1055,"cgroupId":10781,"threadId":1055,"parentProcessId":0,"hostProcessId":34001,"hostThreadId":34001,"hostParentProcessId":33991,"userId":999,"mountNamespace":4026532574,"pidNamespace":4026532575,"processName":"runc:[2:INIT]","executable":{"path":""},"hostName":"calico-kube-con","containerId":"8c504eec51aa1f583bf9c3d50381f715c170a5834060938ecf02ec23703c792b","container":{"id":"8c504eec51aa1f583bf9c3d50381f715c170a5834060938ecf02ec23703c792b"},"kubernetes":{},"eventId":"221","eventName":"execve","matchedPolicies":[""],"argsNum":2,"returnValue":0,"syscall":"execve","stackAddresses":null,"contextFlags":{"containerStarted":true,"isCompat":false},"threadEntityId":667862650,"processEntityId":667862650,"parentEntityId":1807974396,"args":[{"name":"pathname","type":"const char*","value":"/usr/bin/check-status"},{"name":"argv","type":"const char*const*","value":["/usr/bin/check-status","-l"]},{"name":"envp","type":"const char*const*","value":null}]}
@NDStrahilevitz
Copy link
Collaborator

It seems that the container enrichment isn't working in general on your instance. Could you print the startup debug logs using tracee --log debug? This will tell us which enrichers are registering (or failing to) on your tracee.

@jeason81
Copy link
Author

jeason81 commented Jul 10, 2024 •
edited by geyslan
Loading

Sure. Here is the output with the --log debug parameter set:

~ # ./tracee-ebpf -s container -o json --log debug
{"L":"DEBUG","T":"2024-07-10T19:46:24.655Z","M":"OSInfo","ID":"ubuntu","ID_LIKE":"debian","KERNEL_RELEASE":"5.15.0-92-generic","ARCH":"arm64","PRETTY_NAME":"\"Ubuntu 22.04.3 LTS\"","VERSION_ID":"\"22.04\"","VERSION":"\"22.04.3 LTS (Jammy Jellyfish)\"","VERSION_CODENAME":"jammy","origin":"urfave:pkg/cmd/urfave/urfave.go:59","calls":"GetTraceeRunner() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.655Z","M":"OSInfo","lockdown":"open /sys/kernel/security/lockdown: no such file or directory","origin":"urfave:pkg/cmd/urfave/urfave.go:143","calls":"GetTraceeRunner() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.655Z","M":"OSInfo","security_lockdown":"","origin":"urfave:pkg/cmd/urfave/urfave.go:149","calls":"GetTraceeRunner() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"WARN","T":"2024-07-10T19:46:24.655Z","M":"KConfig: could not check enabled kconfig features","error":"could not read /boot/config-5.15.0-92-generic: stat /boot/config-5.15.0-92-generic: no such file or directory"}
{"L":"WARN","T":"2024-07-10T19:46:24.655Z","M":"KConfig: assuming kconfig values, might have unexpected behavior"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.669Z","M":"Unpacked CO:RE bpf object file into memory","origin":"initialize:pkg/cmd/initialize/bpfobject.go:76","calls":"unpackCOREBinary() < BpfObject() < GetTraceeRunner() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.675Z","M":"Adding capabilities to EBPF ring","capability":[14,24],"origin":"capabilities:pkg/capabilities/capabilities.go:241","calls":"(*Capabilities).EBPFRingAdd() < (*Capabilities).initialize() < Initialize.func1() < (*Once).doSlow() < (*Once).Do() < Initialize() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.676Z","M":"Paranoid: Value in /proc/sys/kernel/perf_event_paranoid is > 2","origin":"capabilities:pkg/capabilities/capabilities.go:113","calls":"(*Capabilities).initialize() < Initialize.func1() < (*Once).doSlow() < (*Once).Do() < Initialize() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.676Z","M":"Paranoid: Tracee needs CAP_SYS_ADMIN instead of CAP_BPF + CAP_PERFMON","origin":"capabilities:pkg/capabilities/capabilities.go:114","calls":"(*Capabilities).initialize() < Initialize.func1() < (*Once).doSlow() < (*Once).Do() < Initialize() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.676Z","M":"Paranoid: To change that behavior set perf_event_paranoid to 2 or less.","origin":"capabilities:pkg/capabilities/capabilities.go:115","calls":"(*Capabilities).initialize() < Initialize.func1() < (*Once).doSlow() < (*Once).Do() < Initialize() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.676Z","M":"Adding capabilities to EBPF ring","capability":[21],"origin":"capabilities:pkg/capabilities/capabilities.go:241","calls":"(*Capabilities).EBPFRingAdd() < (*Capabilities).initialize() < Initialize.func1() < (*Once).doSlow() < (*Once).Do() < Initialize() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.676Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).initialize() < Initialize.func1() < (*Once).doSlow() < (*Once).Do() < Initialize() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.676Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.676Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.676Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.676Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.677Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.677Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.677Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.677Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.677Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.677Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.678Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.678Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.678Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.678Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.678Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.678Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.679Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.679Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.679Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.679Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.679Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.679Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.679Z","M":"Adding capabilities to base ring","capability":[12],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.679Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.679Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.680Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.680Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.680Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.680Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.680Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.680Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.680Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.680Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.680Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.680Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.680Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.681Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.681Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.681Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.682Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.682Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.682Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.682Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.682Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.683Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.683Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.683Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.683Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.684Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.684Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.684Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.684Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.684Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.684Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.684Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.685Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.685Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.685Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.685Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.685Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.685Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.685Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.685Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.685Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.686Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.686Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.686Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.686Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.686Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.686Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.686Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.686Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.686Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.687Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.687Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.687Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.687Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.687Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.687Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.687Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.687Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.687Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.687Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.687Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.687Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.688Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.688Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.688Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.688Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.688Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.688Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.688Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.688Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.688Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.688Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.688Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.688Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.689Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.689Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.689Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.689Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.689Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.689Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.689Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.689Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.689Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.689Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.689Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.690Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.690Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.690Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.690Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.690Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.690Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.690Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.694Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.694Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.694Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.695Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.695Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.695Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.695Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.695Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.695Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.695Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.695Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.695Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.695Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.695Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.695Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.696Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.696Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.696Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.696Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.696Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.696Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.697Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.697Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.697Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.697Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.697Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.697Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.697Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.697Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.697Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.697Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.698Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.699Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.700Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.701Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.702Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Adding capabilities to base ring","capability":[],"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Adding capabilities to base ring","capability":null,"origin":"capabilities:pkg/capabilities/capabilities.go:253","calls":"(*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingAdd() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Removing capabilities from the base ring","capability":null,"origin":"capabilities:pkg/capabilities/capabilities.go:273","calls":"(*Capabilities).BaseRingRemove() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingRemove() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).BaseRingRemove() < New() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Enabling cap","cap":"cap_sys_ptrace","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Enabling cap","cap":"cap_dac_override","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.703Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.731Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.731Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.733Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*MountHostOnce).Mount() < NewMountHostOnce() < (*CgroupV2).init() < NewCgroup() < NewCgroups() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.733Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*MountHostOnce).Mount() < NewMountHostOnce() < (*CgroupV2).init() < NewCgroup() < NewCgroups() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.733Z","M":"Enabling cap","cap":"cap_sys_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*MountHostOnce).Mount() < NewMountHostOnce() < (*CgroupV2).init() < NewCgroup() < NewCgroups() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.733Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*MountHostOnce).Mount() < NewMountHostOnce() < (*CgroupV2).init() < NewCgroup() < NewCgroups() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.733Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*MountHostOnce).Mount() < NewMountHostOnce() < (*CgroupV2).init() < NewCgroup() < NewCgroups() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.734Z","M":"created mount object","managed":true,"source":"cgroup2","target":"/tmp/tracee808635390","fsType":"cgroup2","data":"","origin":"mount:pkg/mount/mount.go:74","calls":"NewMountHostOnce() < (*CgroupV2).init() < NewCgroup() < NewCgroups() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.743Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.743Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.743Z","M":"Enabling cap","cap":"cap_ipc_lock","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.743Z","M":"Enabling cap","cap":"cap_sys_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.743Z","M":"Enabling cap","cap":"cap_sys_resource","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.783Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.783Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.783Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.783Z","M":"Enabling cap","cap":"cap_syslog","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.784Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.860Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.861Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.861Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.861Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.861Z","M":"Enabling cap","cap":"cap_ipc_lock","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.861Z","M":"Enabling cap","cap":"cap_sys_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:24.861Z","M":"Enabling cap","cap":"cap_sys_resource","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:27.359Z","M":"KConfig: warning: assuming kconfig values, might have unexpected behavior","origin":"initialization:pkg/ebpf/initialization/kconfig.go:31","calls":"LoadKconfigValues() < (*Tracee).populateBPFMaps() < (*Tracee).initBPF() < (*Tracee).Init.func4() < (*Capabilities).EBPF() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:27.633Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:27.633Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*Tracee).Init() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:27.634Z","M":"Starting lkmSeekerRoutine goroutine","origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:27.635Z","M":"Stopped lkmSeekerRoutine goroutine","origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:27.635Z","M":"Starting hookedSyscallTable goroutine","origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:27.635Z","M":"Stopped hookedSyscallTable goroutine","origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:27.635Z","M":"Starting processLostEvents goroutine","origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:27.635Z","M":"Starting processBPFLogs goroutine","origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:27.635Z","M":"Starting handleEvents goroutine","origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:27.636Z","M":"Starting handleFileCaptures go routine","origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:27.636Z","M":"Tracee is ready callback","origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.292Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.297Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.297Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.297Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.297Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.297Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.297Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.297Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.297Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.297Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.297Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.297Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.297Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.298Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.299Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.304Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.304Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.309Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.309Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.309Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.309Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.309Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.309Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.309Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.309Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.309Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.309Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.309Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.309Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.309Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.313Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.313Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.313Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.313Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.314Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.315Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.315Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.315Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.315Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.315Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.315Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.316Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.316Z","M":"async enrich request in pipeline done","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.316Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.316Z","M":"triggered enrich check in enrich queue","cgroup_id":11014,"origin":"::0","calls":""}
{"timestamp":1720640788286800305,"threadStartTime":1720640788285321843,"processorId":0,"processId":1028,"cgroupId":11014,"threadId":1028,"parentProcessId":50,"hostProcessId":23614,"hostThreadId":23614,"hostParentProcessId":15118,"userId":0,"mountNamespace":4026532311,"pidNamespace":4026532312,"processName":"ipset","executable":{"path":""},"hostName":"vagrant","containerId":"812eb489c260091e2e6e8a6d536be83e1b3e89b5cac8d5be1a0efc3102bfc8dc","container":{"id":"812eb489c260091e2e6e8a6d536be83e1b3e89b5cac8d5be1a0efc3102bfc8dc"},"kubernetes":{},"eventId":"714","eventName":"sched_process_exec","matchedPolicies":[""],"argsNum":15,"returnValue":0,"syscall":"execve","stackAddresses":null,"contextFlags":{"containerStarted":true,"isCompat":false},"threadEntityId":3152978287,"processEntityId":3152978287,"parentEntityId":2928910185,"args":[{"name":"cmdpath","type":"const char*","value":"/usr/sbin/ipset"},{"name":"pathname","type":"const char*","value":"/usr/sbin/ipset"},{"name":"dev","type":"dev_t","value":143},{"name":"inode","type":"unsigned long","value":920550},{"name":"ctime","type":"unsigned long","value":1720640432160038730},{"name":"inode_mode","type":"umode_t","value":33277},{"name":"interpreter_pathname","type":"const char*","value":"/usr/lib64/ld-2.28.so"},{"name":"interpreter_dev","type":"dev_t","value":143},{"name":"interpreter_inode","type":"unsigned long","value":920203},{"name":"interpreter_ctime","type":"unsigned long","value":1720640432008041827},{"name":"argv","type":"const char**","value":["ipset","list"]},{"name":"interp","type":"const char*","value":"/usr/sbin/ipset"},{"name":"stdin_type","type":"umode_t","value":8192},{"name":"stdin_path","type":"char*","value":"/dev/null"},{"name":"invoked_from_kernel","type":"int","value":0},{"name":"env","type":"const char**","value":null}]}
{"L":"DEBUG","T":"2024-07-10T19:46:28.448Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.458Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.461Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.461Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.461Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.461Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.461Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.461Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.461Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.461Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.461Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.461Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.461Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.461Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.461Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.461Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.462Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.462Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.462Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.462Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.462Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.462Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.462Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.462Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.462Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.462Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.462Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.462Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.462Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.462Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.462Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.462Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.462Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.462Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.463Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.466Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.466Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.466Z","M":"async enrich request in pipeline done","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.466Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.466Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.466Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:28.466Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"timestamp":1720640788446209213,"threadStartTime":1720640489579931588,"processorId":1,"processId":1,"cgroupId":10838,"threadId":13,"parentProcessId":0,"hostProcessId":14875,"hostThreadId":14962,"hostParentProcessId":14670,"userId":0,"mountNamespace":4026532335,"pidNamespace":4026532336,"processName":"coredns","executable":{"path":""},"hostName":"coredns-864597b","containerId":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594","container":{"id":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594"},"kubernetes":{},"eventId":"735","eventName":"security_socket_connect","matchedPolicies":[""],"argsNum":3,"returnValue":0,"syscall":"connect","stackAddresses":null,"contextFlags":{"containerStarted":true,"isCompat":false},"threadEntityId":314312491,"processEntityId":70140987,"parentEntityId":2096741702,"args":[{"name":"sockfd","type":"int","value":11},{"name":"type","type":"int","value":1},{"name":"remote_addr","type":"struct sockaddr*","value":{"sa_family":"AF_INET","sin_addr":"0.0.0.0","sin_port":"8080"}}]}
{"L":"DEBUG","T":"2024-07-10T19:46:28.469Z","M":"error picking address","error":"derive.pickIpAndPort: parse.ArgVal[...]: argument type is not of type string, is of type int32","origin":"ebpf:pkg/events/derive/net_tcp.go:22","calls":"(*Tracee).initDerivationTable.NetTCPConnect.func11() < deriveSingleEvent.func1() < deriveMultipleEvents.func1() < Table.DeriveEvent()"}
{"timestamp":1720640788447133090,"threadStartTime":1720640489178425772,"processorId":1,"processId":1,"cgroupId":10838,"threadId":8,"parentProcessId":0,"hostProcessId":14875,"hostThreadId":14931,"hostParentProcessId":14670,"userId":0,"mountNamespace":4026532335,"pidNamespace":4026532336,"processName":"coredns","executable":{"path":""},"hostName":"coredns-864597b","containerId":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594","container":{"id":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594"},"kubernetes":{},"eventId":"2010","eventName":"net_packet_http_request","matchedPolicies":[""],"argsNum":2,"returnValue":0,"syscall":"write","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"threadEntityId":1880178206,"processEntityId":70140987,"parentEntityId":2096741702,"args":[{"name":"metadata","type":"trace.PktMeta","value":{"src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":38878,"dst_port":8080,"protocol":6,"packet_len":144,"iface":"any"}},{"name":"http_request","type":"trace.ProtoHTTPRequest","value":{"method":"GET","protocol":"HTTP/1.1","host":":8080","uri_path":"/health","headers":{"Accept-Encoding":["gzip"],"User-Agent":["Go-http-client/1.1"]},"content_length":0}}]}
{"timestamp":1720640788447262674,"threadStartTime":1720640489178425772,"processorId":1,"processId":1,"cgroupId":10838,"threadId":8,"parentProcessId":0,"hostProcessId":14875,"hostThreadId":14931,"hostParentProcessId":14670,"userId":0,"mountNamespace":4026532335,"pidNamespace":4026532336,"processName":"coredns","executable":{"path":""},"hostName":"coredns-864597b","containerId":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594","container":{"id":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594"},"kubernetes":{},"eventId":"736","eventName":"security_socket_accept","matchedPolicies":[""],"argsNum":2,"returnValue":0,"syscall":"accept4","stackAddresses":null,"contextFlags":{"containerStarted":true,"isCompat":false},"threadEntityId":1880178206,"processEntityId":70140987,"parentEntityId":2096741702,"args":[{"name":"sockfd","type":"int","value":8},{"name":"local_addr","type":"struct sockaddr*","value":{"sa_family":"AF_INET6","sin6_addr":"::","sin6_flowinfo":"0","sin6_port":"8080","sin6_scopeid":"0"}}]}
{"timestamp":1720640788447395633,"threadStartTime":1720640489178425772,"processorId":1,"processId":1,"cgroupId":10838,"threadId":8,"parentProcessId":0,"hostProcessId":14875,"hostThreadId":14931,"hostParentProcessId":14670,"userId":0,"mountNamespace":4026532335,"pidNamespace":4026532336,"processName":"coredns","executable":{"path":""},"hostName":"coredns-864597b","containerId":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594","container":{"id":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594"},"kubernetes":{},"eventId":"736","eventName":"security_socket_accept","matchedPolicies":[""],"argsNum":2,"returnValue":0,"syscall":"accept4","stackAddresses":null,"contextFlags":{"containerStarted":true,"isCompat":false},"threadEntityId":1880178206,"processEntityId":70140987,"parentEntityId":2096741702,"args":[{"name":"sockfd","type":"int","value":8},{"name":"local_addr","type":"struct sockaddr*","value":{"sa_family":"AF_INET6","sin6_addr":"::","sin6_flowinfo":"0","sin6_port":"8080","sin6_scopeid":"0"}}]}
{"timestamp":1720640788447855592,"threadStartTime":1720640489078044651,"processorId":1,"processId":1,"cgroupId":10838,"threadId":1,"parentProcessId":0,"hostProcessId":14875,"hostThreadId":14931,"hostParentProcessId":14670,"userId":0,"mountNamespace":4026532335,"pidNamespace":4026532336,"processName":"coredns","executable":{"path":""},"hostName":"coredns-864597b","containerId":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594","container":{"id":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594"},"kubernetes":{},"eventId":"2011","eventName":"net_packet_http_response","matchedPolicies":[""],"argsNum":2,"returnValue":0,"syscall":"","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"threadEntityId":1101141590,"processEntityId":70140987,"parentEntityId":2096741702,"args":[{"name":"metadata","type":"trace.PktMeta","value":{"src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":8080,"dst_port":38878,"protocol":6,"packet_len":170,"iface":"any"}},{"name":"http_response","type":"trace.ProtoHTTPResponse","value":{"status":"200 OK","status_code":200,"protocol":"HTTP/1.1","headers":{"Content-Length":["2"],"Content-Type":["text/plain; charset=utf-8"],"Date":["Wed, 10 Jul 2024 19:46:28 GMT"]},"content_length":2}}]}
{"L":"DEBUG","T":"2024-07-10T19:46:29.179Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.179Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.180Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"rescheduled enrich trigger in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.181Z","M":"triggered enrich check in enrich queue","cgroup_id":10761,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.182Z","M":"async enrich request in pipeline done","cgroup_id":10761,"origin":"::0","calls":""}
{"timestamp":1720640789178835777,"threadStartTime":1720640489146859932,"processorId":0,"processId":1,"cgroupId":10761,"threadId":8,"parentProcessId":0,"hostProcessId":14883,"hostThreadId":14924,"hostParentProcessId":14536,"userId":1001,"mountNamespace":4026532338,"pidNamespace":4026532339,"processName":"metrics-sidecar","executable":{"path":""},"hostName":"dashboard-metri","containerId":"f28801ca948ef54cd36aac174262e58e8711dcb4b5b5a0dea95b321ec5903cb6","container":{"id":"f28801ca948ef54cd36aac174262e58e8711dcb4b5b5a0dea95b321ec5903cb6"},"kubernetes":{},"eventId":"732","eventName":"security_inode_unlink","matchedPolicies":[""],"argsNum":4,"returnValue":0,"syscall":"unlinkat","stackAddresses":null,"contextFlags":{"containerStarted":true,"isCompat":false},"threadEntityId":99425328,"processEntityId":3296577463,"parentEntityId":2056650904,"args":[{"name":"pathname","type":"const char*","value":"/var/snap/microk8s/common/var/lib/kubelet/pods/34ea85b3-4ed9-4427-b165-f7975c36a248/volumes/kubernetes.io~empty-dir/tmp-volume/metrics.db-journal"},{"name":"inode","type":"unsigned long","value":930559},{"name":"dev","type":"dev_t","value":265289728},{"name":"ctime","type":"u64","value":1720640789170488924}]}
{"L":"DEBUG","T":"2024-07-10T19:46:29.449Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.449Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.449Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.450Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.450Z","M":"triggered enrich check in enrich queue","cgroup_id":10838,"origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:29.450Z","M":"error picking address","error":"derive.pickIpAndPort: parse.ArgVal[...]: argument type is not of type string, is of type int32","origin":"ebpf:pkg/events/derive/net_tcp.go:22","calls":"(*Tracee).initDerivationTable.NetTCPConnect.func11() < deriveSingleEvent.func1() < deriveMultipleEvents.func1() < Table.DeriveEvent()"}
{"timestamp":1720640789446248021,"threadStartTime":1720640489078044651,"processorId":1,"processId":1,"cgroupId":10838,"threadId":1,"parentProcessId":0,"hostProcessId":14875,"hostThreadId":14875,"hostParentProcessId":14670,"userId":0,"mountNamespace":4026532335,"pidNamespace":4026532336,"processName":"coredns","executable":{"path":""},"hostName":"coredns-864597b","containerId":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594","container":{"id":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594"},"kubernetes":{},"eventId":"735","eventName":"security_socket_connect","matchedPolicies":[""],"argsNum":3,"returnValue":0,"syscall":"connect","stackAddresses":null,"contextFlags":{"containerStarted":true,"isCompat":false},"threadEntityId":70140987,"processEntityId":70140987,"parentEntityId":2096741702,"args":[{"name":"sockfd","type":"int","value":11},{"name":"type","type":"int","value":1},{"name":"remote_addr","type":"struct sockaddr*","value":{"sa_family":"AF_INET","sin_addr":"0.0.0.0","sin_port":"8080"}}]}
{"timestamp":1720640789447716691,"threadStartTime":1720640489178425772,"processorId":1,"processId":1,"cgroupId":10838,"threadId":8,"parentProcessId":0,"hostProcessId":14875,"hostThreadId":14931,"hostParentProcessId":14670,"userId":0,"mountNamespace":4026532335,"pidNamespace":4026532336,"processName":"coredns","executable":{"path":""},"hostName":"coredns-864597b","containerId":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594","container":{"id":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594"},"kubernetes":{},"eventId":"736","eventName":"security_socket_accept","matchedPolicies":[""],"argsNum":2,"returnValue":0,"syscall":"accept4","stackAddresses":null,"contextFlags":{"containerStarted":true,"isCompat":false},"threadEntityId":1880178206,"processEntityId":70140987,"parentEntityId":2096741702,"args":[{"name":"sockfd","type":"int","value":8},{"name":"local_addr","type":"struct sockaddr*","value":{"sa_family":"AF_INET6","sin6_addr":"::","sin6_flowinfo":"0","sin6_port":"8080","sin6_scopeid":"0"}}]}
{"timestamp":1720640789447860733,"threadStartTime":1720640489178425772,"processorId":1,"processId":1,"cgroupId":10838,"threadId":8,"parentProcessId":0,"hostProcessId":14875,"hostThreadId":14931,"hostParentProcessId":14670,"userId":0,"mountNamespace":4026532335,"pidNamespace":4026532336,"processName":"coredns","executable":{"path":""},"hostName":"coredns-864597b","containerId":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594","container":{"id":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594"},"kubernetes":{},"eventId":"736","eventName":"security_socket_accept","matchedPolicies":[""],"argsNum":2,"returnValue":0,"syscall":"accept4","stackAddresses":null,"contextFlags":{"containerStarted":true,"isCompat":false},"threadEntityId":1880178206,"processEntityId":70140987,"parentEntityId":2096741702,"args":[{"name":"sockfd","type":"int","value":8},{"name":"local_addr","type":"struct sockaddr*","value":{"sa_family":"AF_INET6","sin6_addr":"::","sin6_flowinfo":"0","sin6_port":"8080","sin6_scopeid":"0"}}]}
{"timestamp":1720640789448237859,"threadStartTime":1720640489178425772,"processorId":1,"processId":1,"cgroupId":10838,"threadId":8,"parentProcessId":0,"hostProcessId":14875,"hostThreadId":14931,"hostParentProcessId":14670,"userId":0,"mountNamespace":4026532335,"pidNamespace":4026532336,"processName":"coredns","executable":{"path":""},"hostName":"coredns-864597b","containerId":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594","container":{"id":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594"},"kubernetes":{},"eventId":"2010","eventName":"net_packet_http_request","matchedPolicies":[""],"argsNum":2,"returnValue":0,"syscall":"write","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"threadEntityId":1880178206,"processEntityId":70140987,"parentEntityId":2096741702,"args":[{"name":"metadata","type":"trace.PktMeta","value":{"src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":38894,"dst_port":8080,"protocol":6,"packet_len":144,"iface":"any"}},{"name":"http_request","type":"trace.ProtoHTTPRequest","value":{"method":"GET","protocol":"HTTP/1.1","host":":8080","uri_path":"/health","headers":{"Accept-Encoding":["gzip"],"User-Agent":["Go-http-client/1.1"]},"content_length":0}}]}
{"timestamp":1720640789448614985,"threadStartTime":1720640489178425772,"processorId":1,"processId":1,"cgroupId":10838,"threadId":8,"parentProcessId":0,"hostProcessId":14875,"hostThreadId":14931,"hostParentProcessId":14670,"userId":0,"mountNamespace":4026532335,"pidNamespace":4026532336,"processName":"coredns","executable":{"path":""},"hostName":"coredns-864597b","containerId":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594","container":{"id":"f70b1fa503a22cd068c7be74441cd4ec649e67e0f2b016bb1e7997ddcfbb3594"},"kubernetes":{},"eventId":"2011","eventName":"net_packet_http_response","matchedPolicies":[""],"argsNum":2,"returnValue":0,"syscall":"","stackAddresses":[0],"contextFlags":{"containerStarted":true,"isCompat":false},"threadEntityId":1880178206,"processEntityId":70140987,"parentEntityId":2096741702,"args":[{"name":"metadata","type":"trace.PktMeta","value":{"src_ip":"127.0.0.1","dst_ip":"127.0.0.1","src_port":8080,"dst_port":38894,"protocol":6,"packet_len":170,"iface":"any"}},{"name":"http_response","type":"trace.ProtoHTTPResponse","value":{"status":"200 OK","status_code":200,"protocol":"HTTP/1.1","headers":{"Content-Length":["2"],"Content-Type":["text/plain; charset=utf-8"],"Date":["Wed, 10 Jul 2024 19:46:29 GMT"]},"content_length":2}}]}
^C{"L":"DEBUG","T":"2024-07-10T19:46:30.048Z","M":"Stopped processBPFLogs goroutine","origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:30.048Z","M":"Stopped handleFileCaptures go routine","origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:30.049Z","M":"Stopped handleEvents goroutine","origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:30.050Z","M":"Stopped processLostEvents goroutine","origin":"::0","calls":""}
{"L":"DEBUG","T":"2024-07-10T19:46:30.475Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*CgroupProbe).detach() < (*ProbeGroup).DetachAll() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:30.475Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*CgroupProbe).detach() < (*ProbeGroup).DetachAll() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:30.476Z","M":"Enabling cap","cap":"cap_ipc_lock","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*CgroupProbe).detach() < (*ProbeGroup).DetachAll() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:30.476Z","M":"Enabling cap","cap":"cap_sys_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*CgroupProbe).detach() < (*ProbeGroup).DetachAll() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:30.476Z","M":"Enabling cap","cap":"cap_sys_resource","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*CgroupProbe).detach() < (*ProbeGroup).DetachAll() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:30.477Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*CgroupProbe).detach() < (*ProbeGroup).DetachAll() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:30.478Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*CgroupProbe).detach() < (*ProbeGroup).DetachAll() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:30.591Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*CgroupProbe).detach() < (*ProbeGroup).DetachAll() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:30.591Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*CgroupProbe).detach() < (*ProbeGroup).DetachAll() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:30.592Z","M":"Enabling cap","cap":"cap_ipc_lock","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*CgroupProbe).detach() < (*ProbeGroup).DetachAll() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:30.592Z","M":"Enabling cap","cap":"cap_sys_resource","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*CgroupProbe).detach() < (*ProbeGroup).DetachAll() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:30.592Z","M":"Enabling cap","cap":"cap_sys_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*CgroupProbe).detach() < (*ProbeGroup).DetachAll() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:30.601Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*CgroupProbe).detach() < (*ProbeGroup).DetachAll() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:30.601Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).EBPF() < (*CgroupProbe).detach() < (*ProbeGroup).DetachAll() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:30.841Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*MountHostOnce).Umount() < (*CgroupV2).destroy() < (*Cgroups).Destroy() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:30.842Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*MountHostOnce).Umount() < (*CgroupV2).destroy() < (*Cgroups).Destroy() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:30.842Z","M":"Enabling cap","cap":"cap_sys_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*MountHostOnce).Umount() < (*CgroupV2).destroy() < (*Cgroups).Destroy() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:30.844Z","M":"Capabilities change","origin":"capabilities:pkg/capabilities/capabilities.go:366","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*MountHostOnce).Umount() < (*CgroupV2).destroy() < (*Cgroups).Destroy() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}
{"L":"DEBUG","T":"2024-07-10T19:46:30.844Z","M":"Enabling cap","cap":"cap_net_admin","origin":"capabilities:pkg/capabilities/capabilities.go:370","calls":"(*Capabilities).apply() < (*Capabilities).Specific() < (*MountHostOnce).Umount() < (*CgroupV2).destroy() < (*Cgroups).Destroy() < (*Tracee).Close() < (*Tracee).Run() < Runner.Run() < main.func1() < (*App).RunContext() < (*App).Run() < main()"}

@NDStrahilevitz
Copy link
Collaborator

Could you try running this with the standard tracee binary? tracee-ebpf as a standalone binary is being deprecated and it is not as actively supported.

@geyslan geyslan added this to the v0.23.0 milestone Aug 23, 2024
@geyslan
Copy link
Member

geyslan commented Nov 14, 2024

@jeason81 did you have a chance to test it again by running tracee as @NDStrahilevitz suggested?

@geyslan
Copy link
Member

geyslan commented Dec 16, 2024

I was digging into this today when I realised that the current Vagrant creates a VM with 6.2.0-1018-aws (> 5.15.0-92-generic than previously used) and the last published release is 0.22.5. Unfortunately I was not able to reproduce, maybe due to the steps that might be different.

@jeason81 how are you setting up k8s in you VM, applying policies, triggering events from etc? Would you mind bumping you dev env and trying to reproduce that behaviour? If it happens again, please provide us the steps to reproduce (commands, settings etc).

Thank you for using and testing Tracee.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@geyslan geyslan

Labels
kind/bug
Projects
None yet
Milestone
v0.23.0
Development

No branches or pull requests
3 participants
@geyslan @jeason81 @NDStrahilevitz