Rafael David Tinoco

Thanks for opening this @javierhonduco and having a resource reference/usage status flag (or similar) sounds interesting indeed (not to close fds and/or double frees).

> will be it's own object, or that related events will be clustered into smaller ebpf objects with multiple programs? ---- I haven't made up my mind on that yet...

Closing this due to inactivity.

Closing this to inactivity.

I believe this was recently discussed and we ended up saying a wrapper was not the way to go.

This is solved for the new network events (coming in the same pipeline as all other events). We will have to migrate other network events (using PktMeta) to the new...

Solved by: commit 4e9b50e5 Author: Rafael David Tinoco Date: Tue Sep 27 04:04:00 2022 events: add network protocol events

This is already solved by the new network code AND https://github.com/aquasecurity/tracee/pull/2569

@06kellyjac is this something that is still affecting you ?

Yep, backlog is big and we've been focusing in new features mostly. Thanks a lot for checking this.