Rafael David Tinoco

Hey @m0nad! So, sorry I should have mentioned that. It is an ARM64 VPS in AWS with Ubuntu Jammy and latest kernel available (5.15 iirc). The kernels used by Ubuntu...

Thanks for the detailed description, makes my life much easier to understand amount of probes and correlation in between temporary and permanent/stable map values. Reviewing this now...

It looks good to me (without testing, just reading code and functions that inspired the logic). Would you mind rebasing, addressing some minor comments (mostly related to style and formatting),...

Thanks @roikol, it all looks good to me now. Logic seems ok and it is self contained (related to tracee inner engine), reducing potential issues. I'm merging it now (might...

I'll squash and add appropriate event description to the git log as well.

LGTM, @josedonizetti, could u check code analysis and I would remove signed off for minor commits (they pollute git log a lot).

> Question: I guess those examples referring to in-container execution should stay untouched, right? Like: I believe so. I wanted to show we were inside the container (could not think...

@josedonizetti with the documentation changes we've made recently... maybe we should do the same changes as proposed here ? Unfortunately there are many conflicts now for this to be worth...

Hello @cdelzotti, we're changing the way we capture network packages/events in tracee (very soon) and I believe we won't need to deal with physical layer details such as bonding/mptcp. I'll...

@cdelzotti Sorry, I mixed concepts (bonding/ether-channel) with MPTCP (multiple flows/windows same socket). We're current replacing our network/capturing code and things will be more clear once we have finished it. By...