kernel-event-collector-module
kernel-event-collector-module copied to clipboard
vmware
This is the Linux kernel module event collector for the Carbon Black Cloud.
The network tracking table (net-hooks.c) tracks network connection for a process, to dedup net-conn events. The tracking table tracks the process only using the PID value & does not include...
The module sometimes logs the message "unable to find original function for restore" to the system log. The log is emitted during module unload.
The module may log "Error copying UDP DNS response data" to the system log when TCP packages with source port 53 are observed. This is due to a problem in...