package tracee.v1beta1
Get desktop application:
View/edit binary Protocol Buffers messages
rpc Write (, )
datasource.proto:18rpc WriteStream (stream , )
datasource.proto:19
rpc ChangeLogLevel (, )
diagnostic.proto:59message
diagnostic.proto:43LogLevel level = 1
message
diagnostic.proto:47(message has no fields)
rpc GetMetrics (, )
diagnostic.proto:58message
diagnostic.proto:9(message has no fields)
message
diagnostic.proto:12uint64 EventCount = 1
uint64 EventsFiltered = 2
uint64 NetCapCount = 3
uint64 BPFLogsCount = 4
uint64 ErrorCount = 5
uint64 LostEvCount = 6
uint64 LostWrCount = 7
uint64 LostNtCapCount = 8
uint64 LostBPFLogsCount = 9
repeated BPFEventStats = 10
rpc GetStacktrace (, )
diagnostic.proto:60message
diagnostic.proto:50(message has no fields)
message
diagnostic.proto:53bytes Stacktrace = 1
service TraceeService
tracee.proto:52rpc DisableEvent (, )
tracee.proto:57message
tracee.proto:35string name = 1
message
tracee.proto:39(message has no fields)
rpc EnableEvent (, )
tracee.proto:56message
tracee.proto:27string name = 1
message
tracee.proto:31(message has no fields)
rpc GetEventDefinitions (, )
tracee.proto:53message
tracee.proto:18repeated string event_names = 1
TODO: tags
message
tracee.proto:23repeated definitions = 1
rpc GetVersion (, )
tracee.proto:59message
tracee.proto:11(message has no fields)
message
tracee.proto:14string version = 1
rpc StreamEvents (, stream )
tracee.proto:54message
tracee.proto:43repeated string policies = 1
optional mask = 2
message
tracee.proto:48optional event = 1
message
diagnostic.proto:25Used in:
EventId id = 1
string name = 2
bool internal = 3
uint64 attempts = 4
uint64 failures = 5
https://pkg.go.dev/kernel.org/pub/linux/libs/security/libcap/cap@v1.2.68#Value
Used in:
CAP_CHOWN = 0
DAC_OVERRIDE = 1
CAP_DAC_READ_SEARCH = 2
CAP_FOWNER = 3
CAP_FSETID = 4
CAP_KILL = 5
CAP_SETGID = 6
CAP_SETUID = 7
CAP_SETPCAP = 8
CAP_NET_BIND_SERVICE = 10
CAP_NET_BROADCAST = 11
CAP_NET_ADMIN = 12
CAP_NET_RAW = 13
CAP_IPC_LOCK = 14
CAP_IPC_OWNER = 15
CAP_SYS_MODULE = 16
CAP_SYS_RAWIO = 17
CAP_SYS_CHROOT = 18
CAP_SYS_PTRACE = 19
CAP_SYS_PACCT = 20
CAP_SYS_ADMIN = 21
CAP_SYS_BOOT = 22
CAP_SYS_NICE = 23
CAP_SYS_RESOURCE = 24
CAP_SYS_TIME = 25
CAP_SYS_TTY_CONFIG = 26
CAP_MKNOD = 27
CAP_LEASE = 28
CAP_AUDIT_WRITE = 29
CAP_AUDIT_CONTROL = 30
CAP_SETFCAP = 31
CAP_MAC_OVERRIDE = 32
CAP_MAC_ADMIN = 33
CAP_SYSLOG = 34
CAP_WAKE_ALARM = 35
CAP_BLOCK_SUSPEND = 36
CAP_AUDIT_READ = 37
CAP_PERFMON = 38
CAP_BPF = 39
CAP_CHECKPOINT_RESTORE = 40
message
event.proto:653Used in:
string id = 1
string name = 2
optional image = 3
bool started = 4
message
event.proto:660Used in:
string id = 1
repeated string repo_digests = 2
string name = 3
message
event_data.proto:58Used in:
optional uid = 1
optional gid = 2
optional suid = 3
optional sgid = 4
optional euid = 5
optional egid = 6
optional fsuid = 7
optional fsgid = 8
optional user_namespace = 9
optional secure_bits = 10
repeated Capability cap_inheritable = 11
repeated Capability cap_permitted = 12
repeated Capability cap_effective = 13
repeated Capability cap_bounding = 14
repeated Capability cap_ambient = 15
message
event_data.proto:232Used in:
uint32 id = 1
uint32 qr = 2
string op_code = 3
uint32 aa = 4
uint32 tc = 5
uint32 rd = 6
uint32 ra = 7
uint32 z = 8
string response_code = 9
uint32 qd_count = 10
uint32 an_count = 11
uint32 ns_count = 12
uint32 ar_count = 13
repeated questions = 14
repeated answers = 15
repeated authorities = 16
repeated additionals = 17
message
event_data.proto:293Used in:
uint32 Preference = 1
string name = 2
message
event_data.proto:304Used in:
string code = 1
string data = 2
message
event_data.proto:252Used in:
string name = 1
string type = 2
string class = 3
message
event_data.proto:258Used in:
string name = 1
string type = 2
string class = 3
uint32 ttl = 4
string ip = 5
string ns = 6
string cname = 7
string ptr = 8
repeated string txts = 9
optional soa = 10
optional srv = 11
optional mx = 12
repeated opt = 13
optional uri = 14
string txt = 15
message
event_data.proto:276Used in:
string mname = 1
string rname = 2
uint32 serial = 3
uint32 refresh = 4
uint32 retry = 5
uint32 expire = 6
uint32 minimum = 7
message
event_data.proto:286Used in:
uint32 priority = 1
uint32 weight = 2
uint32 port = 3
string name = 4
message
event_data.proto:298Used in:
uint32 priority = 1
uint32 weight = 2
string target = 3
message
event.proto:681Used in:
uint32 id = 1
string name = 2
repeated data = 3
optional parent = 4
message
event_data.proto:365Used in:
string type = 1
uint32 ttl = 2
string answer = 3
message
event_data.proto:359Used in: ,
string query = 1
string query_type = 2
string query_class = 3
message
event_data.proto:224Used in:
repeated questions = 1
message
event_data.proto:371Used in:
optional dns_query_data = 1
repeated dns_answer = 2
message
event_data.proto:228Used in:
repeated responses = 1
message
event.proto:594Used in:
optional timestamp = 1
EventId id = 2
string name = 3
optional policies = 4
optional workload = 5
repeated data = 6
optional threat = 7
optional detected_from = 8
message
definition.proto:12Used in:
int32 id = 1
string name = 2
optional version = 3
string description = 4
repeated string tags = 5
repeated fields = 6
message
definition.proto:7Used in:
string name = 1
string type = 2
Used in: ,
unspecified = 0
default
read = 1
Syscalls
write = 2
open = 3
close = 4
stat = 5
fstat = 6
lstat = 7
poll = 8
lseek = 9
mmap = 10
mprotect = 11
munmap = 12
brk = 13
rt_sigaction = 14
rt_sigprocmask = 15
rt_sigreturn = 16
ioctl = 17
pread64 = 18
pwrite64 = 19
readv = 20
writev = 21
access = 22
pipe = 23
select = 24
sched_yield = 25
mremap = 26
msync = 27
mincore = 28
madvise = 29
shmget = 30
shmat = 31
shmctl = 32
dup = 33
dup2 = 34
pause = 35
nanosleep = 36
getitimer = 37
alarm = 38
setitimer = 39
getpid = 40
sendfile = 41
socket = 42
connect = 43
accept = 44
sendto = 45
recvfrom = 46
sendmsg = 47
recvmsg = 48
shutdown = 49
bind = 50
listen = 51
getsockname = 52
getpeername = 53
socketpair = 54
setsockopt = 55
getsockopt = 56
clone = 57
fork = 58
vfork = 59
execve = 60
exit = 61
wait4 = 62
kill = 63
uname = 64
semget = 65
semop = 66
semctl = 67
shmdt = 68
msgget = 69
msgsnd = 70
msgrcv = 71
msgctl = 72
fcntl = 73
flock = 74
fsync = 75
fdatasync = 76
truncate = 77
ftruncate = 78
getdents = 79
getcwd = 80
chdir = 81
fchdir = 82
rename = 83
mkdir = 84
rmdir = 85
creat = 86
link = 87
unlink = 88
symlink = 89
readlink = 90
chmod = 91
fchmod = 92
chown = 93
fchown = 94
lchown = 95
umask = 96
gettimeofday = 97
getrlimit = 98
getrusage = 99
sysinfo = 100
times = 101
ptrace = 102
getuid = 103
syslog = 104
getgid = 105
setuid = 106
setgid = 107
geteuid = 108
getegid = 109
setpgid = 110
getppid = 111
getpgrp = 112
setsid = 113
setreuid = 114
setregid = 115
getgroups = 116
setgroups = 117
setresuid = 118
getresuid = 119
setresgid = 120
getresgid = 121
getpgid = 122
setfsuid = 123
setfsgid = 124
getsid = 125
capget = 126
capset = 127
rt_sigpending = 128
rt_sigtimedwait = 129
rt_sigqueueinfo = 130
rt_sigsuspend = 131
sigaltstack = 132
utime = 133
mknod = 134
uselib = 135
personality = 136
ustat = 137
statfs = 138
fstatfs = 139
sysfs = 140
getpriority = 141
setpriority = 142
sched_setparam = 143
sched_getparam = 144
sched_setscheduler = 145
sched_getscheduler = 146
sched_get_priority_max = 147
sched_get_priority_min = 148
sched_rr_get_interval = 149
mlock = 150
munlock = 151
mlockall = 152
munlockall = 153
vhangup = 154
modify_ldt = 155
pivot_root = 156
sysctl = 157
prctl = 158
arch_prctl = 159
adjtimex = 160
setrlimit = 161
chroot = 162
sync = 163
acct = 164
settimeofday = 165
mount = 166
umount2 = 167
swapon = 168
swapoff = 169
reboot = 170
sethostname = 171
setdomainname = 172
iopl = 173
ioperm = 174
create_module = 175
init_module = 176
delete_module = 177
get_kernel_syms = 178
query_module = 179
quotactl = 180
nfsservctl = 181
getpmsg = 182
putpmsg = 183
afs = 184
tuxcall = 185
security = 186
gettid = 187
readahead = 188
setxattr = 189
lsetxattr = 190
fsetxattr = 191
getxattr = 192
lgetxattr = 193
fgetxattr = 194
listxattr = 195
llistxattr = 196
flistxattr = 197
removexattr = 198
lremovexattr = 199
fremovexattr = 200
tkill = 201
time = 202
futex = 203
sched_setaffinity = 204
sched_getaffinity = 205
set_thread_area = 206
io_setup = 207
io_destroy = 208
io_getevents = 209
io_submit = 210
io_cancel = 211
get_thread_area = 212
lookup_dcookie = 213
epoll_create = 214
epoll_ctl_old = 215
epoll_wait_old = 216
remap_file_pages = 217
getdents64 = 218
set_tid_address = 219
restart_syscall = 220
semtimedop = 221
fadvise64 = 222
timer_create = 223
timer_settime = 224
timer_gettime = 225
timer_getoverrun = 226
timer_delete = 227
clock_settime = 228
clock_gettime = 229
clock_getres = 230
clock_nanosleep = 231
exit_group = 232
epoll_wait = 233
epoll_ctl = 234
tgkill = 235
utimes = 236
vserver = 237
mbind = 238
set_mempolicy = 239
get_mempolicy = 240
mq_open = 241
mq_unlink = 242
mq_timedsend = 243
mq_timedreceive = 244
mq_notify = 245
mq_getsetattr = 246
kexec_load = 247
waitid = 248
add_key = 249
request_key = 250
keyctl = 251
ioprio_set = 252
ioprio_get = 253
inotify_init = 254
inotify_add_watch = 255
inotify_rm_watch = 256
migrate_pages = 257
openat = 258
mkdirat = 259
mknodat = 260
fchownat = 261
futimesat = 262
newfstatat = 263
unlinkat = 264
renameat = 265
linkat = 266
symlinkat = 267
readlinkat = 268
fchmodat = 269
faccessat = 270
pselect6 = 271
ppoll = 272
unshare = 273
set_robust_list = 274
get_robust_list = 275
splice = 276
tee = 277
sync_file_range = 278
vmsplice = 279
move_pages = 280
utimensat = 281
epoll_pwait = 282
signalfd = 283
timerfd_create = 284
eventfd = 285
fallocate = 286
timerfd_settime = 287
timerfd_gettime = 288
accept4 = 289
signalfd4 = 290
eventfd2 = 291
epoll_create1 = 292
dup3 = 293
pipe2 = 294
inotify_init1 = 295
preadv = 296
pwritev = 297
rt_tgsigqueueinfo = 298
perf_event_open = 299
recvmmsg = 300
fanotify_init = 301
fanotify_mark = 302
prlimit64 = 303
name_to_handle_at = 304
open_by_handle_at = 305
clock_adjtime = 306
syncfs = 307
sendmmsg = 308
setns = 309
getcpu = 310
process_vm_readv = 311
process_vm_writev = 312
kcmp = 313
finit_module = 314
sched_setattr = 315
sched_getattr = 316
renameat2 = 317
seccomp = 318
getrandom = 319
memfd_create = 320
kexec_file_load = 321
bpf = 322
execveat = 323
userfaultfd = 324
membarrier = 325
mlock2 = 326
copy_file_range = 327
preadv2 = 328
pwritev2 = 329
pkey_mprotect = 330
pkey_alloc = 331
pkey_free = 332
statx = 333
io_pgetevents = 334
rseq = 335
pidfd_send_signal = 336
io_uring_setup = 337
io_uring_enter = 338
io_uring_register = 339
open_tree = 340
move_mount = 341
fsopen = 342
fsconfig = 343
fsmount = 344
fspick = 345
pidfd_open = 346
clone3 = 347
close_range = 348
openat2 = 349
pidfd_getfd = 350
faccessat2 = 351
process_madvise = 352
epoll_pwait2 = 353
mount_setattr = 354
quotactl_fd = 355
landlock_create_ruleset = 356
landlock_add_rule = 357
landlock_restrict_self = 358
memfd_secret = 359
process_mrelease = 360
waitpid = 361
oldfstat = 362
break = 363
oldstat = 364
umount = 365
stime = 366
stty = 367
gtty = 368
nice = 369
ftime = 370
prof = 371
signal = 372
lock = 373
mpx = 374
ulimit = 375
oldolduname = 376
sigaction = 377
sgetmask = 378
ssetmask = 379
sigsuspend = 380
sigpending = 381
oldlstat = 382
readdir = 383
profil = 384
socketcall = 385
olduname = 386
idle = 387
vm86old = 388
ipc = 389
sigreturn = 390
sigprocmask = 391
bdflush = 392
afs_syscall = 393
llseek = 394
old_select = 395
vm86 = 396
old_getrlimit = 397
mmap2 = 398
truncate64 = 399
ftruncate64 = 400
stat64 = 401
lstat64 = 402
fstat64 = 403
lchown16 = 404
getuid16 = 405
getgid16 = 406
geteuid16 = 407
getegid16 = 408
setreuid16 = 409
setregid16 = 410
getgroups16 = 411
setgroups16 = 412
fchown16 = 413
setresuid16 = 414
getresuid16 = 415
setresgid16 = 416
getresgid16 = 417
chown16 = 418
setuid16 = 419
setgid16 = 420
setfsuid16 = 421
setfsgid16 = 422
fcntl64 = 423
sendfile32 = 424
statfs64 = 425
fstatfs64 = 426
fadvise64_64 = 427
clock_gettime32 = 428
clock_settime32 = 429
clock_adjtime64 = 430
clock_getres_time32 = 431
clock_nanosleep_time32 = 432
timer_gettime32 = 433
timer_settime32 = 434
timerfd_gettime32 = 435
timerfd_settime32 = 436
utimensat_time32 = 437
pselect6_time32 = 438
ppoll_time32 = 439
io_pgetevents_time32 = 440
recvmmsg_time32 = 441
mq_timedsend_time32 = 442
mq_timedreceive_time32 = 443
rt_sigtimedwait_time32 = 444
futex_time32 = 445
sched_rr_get_interval_time32 = 446
net_packet_base = 1000
Common events (used by all architectures).
net_packet_raw = 1001
net_packet_ip_base = 1002
net_packet_tcp_base = 1003
net_packet_udp_base = 1004
net_packet_icmp_base = 1005
net_packet_icmpv6_base = 1006
net_packet_dns_base = 1007
net_packet_http_base = 1008
net_packet_capture = 1009
net_packet_flow_base = 1010
sys_enter = 1012
max_net_id = 1011; // Reserved: MaxNetID marker (consumes ID slot)
sys_exit = 1013
sched_process_fork = 1014
sched_process_exec = 1015
sched_process_exit = 1016
sched_switch = 1017
do_exit = 1018
cap_capable = 1019
vfs_write = 1020
vfs_writev = 1021
vfs_read = 1022
vfs_readv = 1023
mem_prot_alert = 1024
commit_creds = 1025
switch_task_ns = 1026
magic_write = 1027
cgroup_attach_task = 1028
cgroup_mkdir = 1029
cgroup_rmdir = 1030
security_bprm_check = 1031
security_file_open = 1032
security_inode_unlink = 1033
security_socket_create = 1034
security_socket_listen = 1035
security_socket_connect = 1036
security_socket_accept = 1037
security_socket_bind = 1038
security_socket_setsockopt = 1039
security_sb_mount = 1040
security_bpf = 1041
security_bpf_map = 1042
security_kernel_read_file = 1043
security_inode_mknod = 1044
security_kernel_post_read_file = 1045
security_inode_symlink = 1046
security_mmap_file = 1047
security_file_mprotect = 1048
socket_dup = 1049
zeroed_inodes = 1050
__kernel_write = 1051
proc_create = 1052
kprobe_attach = 1053
call_usermodehelper = 1054
dirty_pipe_splice = 1055
debugfs_create_file = 1056
syscall_table_check = 1057
debugfs_create_dir = 1058
device_add = 1059
register_chrdev = 1060
shared_object_loaded = 1061
do_init_module = 1062
socket_accept = 1063
load_elf_phdrs = 1064
hooked_proc_fops = 1065
print_net_seq_ops = 1066
task_rename = 1067
security_inode_rename = 1068
do_sigaction = 1069
bpf_attach = 1070
kallsyms_lookup_name = 1071
do_mmap = 1072
print_mem_dump = 1073
vfs_utimes = 1074
do_truncate = 1075
file_modification = 1076
inotify_watch = 1077
security_bpf_prog = 1078
process_execute_failed = 1079
security_path_notify = 1080
set_fs_pwd = 1081
suspicious_syscall_source = 1082
stack_pivot = 1083
hidden_kernel_module_seeker = 1084
module_load = 1085
module_free = 1086
execute_finished = 1087
process_execute_failed_internal = 1088
security_task_setrlimit = 1089
security_settime64 = 1090
chmod_common = 1091
security_sb_umount = 1092
security_task_prctl = 1093
net_packet_ipv4 = 2000
Events originated from user-space
net_packet_ipv6 = 2001
net_packet_tcp = 2002
net_packet_udp = 2003
net_packet_icmp = 2004
net_packet_icmpv6 = 2005
net_packet_dns = 2006
net_packet_dns_request = 2007
net_packet_dns_response = 2008
net_packet_http = 2009
net_packet_http_request = 2010
net_packet_http_response = 2011
net_flow_tcp_begin = 2012
net_flow_tcp_end = 2013
net_tcp_connect = 2015
max_user_net_id = 2014; // Reserved: MaxUserNetID marker (consumes ID slot)
init_namespaces = 2016
container_create = 2017
container_remove = 2018
existing_container = 2019
hooked_syscall = 2020
hooked_seq_ops = 2021
symbols_loaded = 2022
symbols_collision = 2023
hidden_kernel_module = 2024
ftrace_hook = 2025
tracee_info = 2026
message
event_data.proto:10Used in: ,
string name = 1
oneof value
int32 int32 = 2
intT
int64 int64 = 3
longT
uint32 u_int32 = 4
uintT, modeT, devT, u8T, u16T
uint64 u_int64 = 5
ulongT, offT, sizeT (pointerT removed - use dedicated 'pointer' field)
string str = 6
strT
bytes bytes = 7
bytesT
bool bool = 8
boolT
str_array = 9
strArrT, argsArrT
int32_array = 10
intArr2T
u_int64_array = 11
uint64ArrT
sockaddr = 12
sockaddrT
credentials = 13
credT
timespec = 14
timespecT
hooked_syscalls = 15
hooked_seq_ops = 16
ipv4 = 17
ipv6 = 18
tcp = 19
udp = 20
icmp = 21
icmpv6 = 22
dns = 23
dns_questions = 24
dns_responses = 25
packet_metadata = 26
http = 27
http_request = 28
http_response = 29
struct = 30
uint64 pointer = 31
message
event.proto:625Used in:
string path = 1
message
event_data.proto:309Used in:
string direction = 1
string method = 2
string protocol = 3
string host = 4
string uri_path = 5
string status = 6
int32 status_code = 7
map<string, > headers = 8
int64 content_length = 9
message
event_data.proto:321Used in:
string method = 1
string protocol = 3
string host = 4
string uri_path = 5
map<string, > headers = 6
int64 content_length = 7
message
event_data.proto:330Used in:
string status = 1
int32 status_code = 2
string protocol = 3
map<string, > headers = 4
int64 content_length = 5
message
event_data.proto:153Used in:
map<string, > value = 1
message
event_data.proto:148Used in: ,
string symbol_name = 1
string module_owner = 2
message
event_data.proto:144Used in:
repeated value = 1
message
event_data.proto:338Used in: , ,
repeated string header = 1
message
event_data.proto:212Used in:
string type_code = 1
uint32 checksum = 2
uint32 id = 3
uint32 seq = 4
message
event_data.proto:219Used in:
string type_code = 1
uint32 checksum = 2
message
event_data.proto:159Used in:
uint32 version = 1
uint32 ihl = 2
uint32 tos = 3
uint32 length = 4
uint32 id = 5
uint32 flags = 6
uint32 frag_offset = 7
uint32 ttl = 8
string protocol = 9
uint32 checksum = 10
string src_ip = 11
string dst_ip = 12
message
event_data.proto:174Used in:
uint32 version = 1
uint32 traffic_class = 2
uint32 flow_label = 3
uint32 length = 4
string next_header = 5
uint32 hop_limit = 6
string src_ip = 7
string dst_ip = 8
message
event_data.proto:50Used in:
repeated int32 value = 1
message
event.proto:666Used in:
optional pod = 1
optional namespace = 2
message
event.proto:677Used in:
string name = 1
Used in:
Debug = 0
Info = 1
Warn = 2
Error = 3
DPanic = 4
Panic = 5
Fatal = 6
message
threat.proto:23Used in:
optional tactic = 1
optional technique = 2
message
threat.proto:28Used in:
string name = 1
message
threat.proto:32Used in:
string id = 1
string name = 2
Used in:
INVALID = 0
INGRESS = 1
EGRESS = 3
message
event_data.proto:348Used in:
string src_ip = 1
string dst_ip = 2
uint32 src_port = 3
uint32 dst_port = 4
uint32 protocol = 5
uint32 packet_len = 6
string iface = 7
PacketDirection direction = 8
message
event.proto:671Used in:
string name = 1
string uid = 2
map<string, string> labels = 3
message
event.proto:605Used in:
repeated string matched = 1
message
event.proto:615Used in:
optional executable = 1
optional unique_id = 2
optional host_pid = 3
optional pid = 4
optional real_user = 5
optional thread = 6
repeated ancestors = 7
Used in:
INFO = 0
LOW = 1
MEDIUM = 2
HIGH = 3
CRITICAL = 4
message
event_data.proto:80Used in:
sa_family_t sa_family = 1
string sun_path = 2
string sin_addr = 3
uint32 sin_port = 4
string sin6_addr = 5
uint32 sin6_port = 6
uint32 sin6_flowinfo = 7
uint32 sin6_scopeid = 8
message
event.proto:648Used in:
uint64 address = 1
string symbol = 2
message
event_data.proto:46Used in:
repeated string value = 1
message
event_data.proto:185Used in:
uint32 src_port = 1
uint32 dst_port = 2
uint32 seq = 3
uint32 ack = 4
uint32 data_offset = 5
uint32 fin_flag = 6
uint32 syn_flag = 7
uint32 rst_flag = 8
uint32 psh_flag = 9
uint32 ack_flag = 10
uint32 urg_flag = 11
uint32 ece_flag = 12
uint32 cwr_flag = 13
uint32 ns_flag = 14
uint32 window = 15
uint32 checksum = 16
uint32 urgent = 17
message
event.proto:633Used in:
optional start_time = 1
string name = 2
optional unique_id = 3
optional host_tid = 4
optional tid = 5
string syscall = 6
bool compat = 7
optional user_stack_trace = 8
message
threat.proto:15Used in:
string description = 1
optional mitre = 2
Severity severity = 3
string name = 4
map<string, string> properties = 5
message
event_data.proto:76Used in:
optional value = 1
message
event_data.proto:205Used in:
uint32 src_port = 1
uint32 dst_port = 2
uint32 length = 3
uint32 checksum = 4
message
event_data.proto:54Used in:
repeated uint64 value = 1
message
event.proto:629Used in:
optional id = 1
message
event.proto:644Used in:
repeated addresses = 1
message
definition.proto:21Used in:
uint64 major = 1
uint64 minor = 2
uint64 patch = 3
message
event.proto:609Used in:
optional process = 1
optional container = 2
optional k8s = 3
message
datasource.proto:8Used as request type in: DataSourceService.Write, DataSourceService.WriteStream
string id = 1
string namespace = 2
optional key = 3
optional value = 4
message
datasource.proto:15Used as response type in: DataSourceService.Write, DataSourceService.WriteStream
(message has no fields)
Used in:
SA_FAMILY_T_UNSPEC = 0
AF_UNIX = 1
POSIX.1g used the name AF_LOCAL as a synonym for AF_UNIX, but this name is not used in SUSv3.
AF_INET = 2
AF_INET6 = 10