File tree Expand file tree Collapse file tree 1 file changed +7
-3
lines changed
internal/pkg/daemon/enricher/auditsource Expand file tree Collapse file tree 1 file changed +7
-3
lines changed Original file line number Diff line number Diff line change @@ -21,7 +21,6 @@ package auditsource
21
21
import (
22
22
"bytes"
23
23
"encoding/binary"
24
- "errors"
25
24
"fmt"
26
25
"time"
27
26
@@ -94,18 +93,23 @@ func (b *BpfSource) StartTail() (chan *types.AuditLine, error) {
94
93
go func () {
95
94
for val := range events {
96
95
if len (val ) < 14 {
97
- b .logger .Error (errors .New ("received invalid audit log message" ), "val" , val )
96
+ b .logger .Info ("received invalid audit log message" , "val" , val )
97
+
98
98
break
99
99
}
100
+
100
101
mntns := binary .LittleEndian .Uint32 (val [0 :4 ])
101
102
pid := int (binary .LittleEndian .Uint32 (val [4 :8 ]))
102
103
request := binary .LittleEndian .Uint32 (val [8 :12 ])
103
104
complain := val [12 ]
104
105
strs := bytes .Split (val [13 :], []byte ("\x00 " ))
106
+
105
107
if len (strs ) < 3 {
106
- b .logger .Error (errors .New ("received invalid audit log message" ), "val" , val )
108
+ b .logger .Info ("received invalid audit log message" , "val" , val )
109
+
107
110
break
108
111
}
112
+
109
113
op := string (strs [0 ])
110
114
comm := string (strs [1 ])
111
115
name := string (strs [2 ])
You can’t perform that action at this time.
0 commit comments