Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- DEBU 2017-12-11T03:06:18.752 main.go:192 Using defender hostname "gke-staging-2-product-default-pool-0a10e6e2-jr7h.c.staging-2-flexcommon.internal"
- DEBU 2017-12-11T03:06:18.752 defender.go:64 Starting defender version 2.2.100
- DEBU 2017-12-11T03:06:18.752 defender.go:65 Docker socket path /var/run/docker.sock
- DEBU 2017-12-11T03:06:18.752 defender.go:66 Hostname gke-staging-2-product-default-pool-0a10e6e2-jr7h.c.staging-2-flexcommon.internal
- DEBU 2017-12-11T03:06:18.752 defender.go:67 Local cache /var/lib/twistlock/local_db
- DEBU 2017-12-11T03:06:18.752 defender.go:68 Console Web socket address wss://35.227.171.196:8084
- DEBU 2017-12-11T03:06:18.752 defender.go:69 Systemd integration enabled false
- DEBU 2017-12-11T03:06:18.752 defender.go:70 Scan enabled true
- DEBU 2017-12-11T03:06:18.752 defender.go:71 Network scan enabled true
- DEBU 2017-12-11T03:06:18.752 defender.go:72 Syslog scan true
- DEBU 2017-12-11T03:06:18.752 defender.go:73 LDAP enabled false
- DEBU 2017-12-11T03:06:18.752 defender.go:74 Process scanning enabled true
- DEBU 2017-12-11T03:06:18.752 defender.go:75 Filesystem scanning enabled true
- DEBU 2017-12-11T03:06:18.752 defender.go:76 Defender type docker
- DEBU 2017-12-11T03:06:18.752 defender.go:77 Listener type none
- DEBU 2017-12-11T03:06:18.752 defender.go:78 Proxy type
- DEBU 2017-12-11T03:06:18.761 defender.go:1517 Using docker API version "1.26"
- DEBU 2017-12-11T03:06:18.761 inventory_linux.go:76 Initializing Twistlock containers and images
- DEBU 2017-12-11T03:06:18.767 inventory_linux.go:97 Found twistlock containers: map[3dcac7311e54fc7e6735add07714f15400a5fbebdc0b04301685f6e3e91d355e:true], images: map[c48990706fd7a976a56ea829fd1f4bb719ddd962080f92b922aeb7c62dab2aaf:true]
- DEBU 2017-12-11T03:06:18.767 group.go:16 Configuring group accessor with '2' accessors
- DEBU 2017-12-11T03:06:18.872 db_malware.go:97 Initializing malware database
- DEBU 2017-12-11T03:06:18.872 scap_db.go:37 Creating scap files directory
- DEBU 2017-12-11T03:06:18.872 defender.go:168 Using defender binary from /var/lib/twistlock/utils/defender
- DEBU 2017-12-11T03:06:18.922 app_profiler.go:91 Initializing applications database /data/defender.applications.json started
- INFO 2017-12-11T03:06:18.923 app_profiler.go:122 Initializing applications database completed (entries: '13' total: '13' errors:'0' last error:'<nil>')
- DEBU 2017-12-11T03:06:18.923 manager.go:289 Skipping container in host namespace: /twistlock_defender_2_2_100 twistlock/private:defender_2_2_100
- DEBU 2017-12-11T03:06:18.923 manager.go:282 Skipping infra image /k8s_POD_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:18.923 manager.go:282 Skipping infra image /k8s_POD_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:18.923 manager.go:289 Skipping container in host namespace: /k8s_prometheus-to-sd-exporter_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google-containers/prometheus-to-sd@sha256:c6aaa681e77e55aa7f7017ca55265accde313f8e2e5484ee1d0a4d89ff741c48
- DEBU 2017-12-11T03:06:18.923 manager.go:289 Skipping container in host namespace: /k8s_fluentd-gcp_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google-containers/fluentd-gcp@sha256:31a2043cc4dc93208c843cc44d1325f7ebf0d18a863bec738fe62b56965dbf62
- DEBU 2017-12-11T03:06:18.923 manager.go:282 Skipping infra image /k8s_POD_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:18.923 manager.go:289 Skipping container in host namespace: /k8s_kube-proxy_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 sha256:c9b6f1a423cf41d6fdccb1ca827005f1cc86e5d7d56392df8ddb4437733ae95e
- DEBU 2017-12-11T03:06:18.923 manager.go:282 Skipping infra image /k8s_POD_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:18.923 manager.go:141 Application firewall manager started
- DEBU 2017-12-11T03:06:18.923 ws.go:160 Web socket is not configured yet
- DEBU 2017-12-11T03:06:18.923 ws.go:245 Queing message, queue length: '0'
- DEBU 2017-12-11T03:06:18.934 ws.go:107 Reconnecting to wss://35.227.171.196:8084 TLS enabled true queue: 1
- DEBU 2017-12-11T03:06:18.998 ws.go:256 Sending 1 messages
- DEBU 2017-12-11T03:06:19.026 ws.go:301 Received message with type connect
- DEBU 2017-12-11T03:06:19.026 defender.go:1180 Received connect message for defender "gke-staging-2-product-default-pool-0a10e6e2-jr7h.c.staging-2-flexcommon.internal"
- DEBU 2017-12-11T03:06:19.028 api.go:33 Setting temporary token
- DEBU 2017-12-11T03:06:19.028 trust.go:21 Received update for trust group 0
- DEBU 2017-12-11T03:06:19.028 db_malware.go:78 Custom malware feed update with 0 entries
- DEBU 2017-12-11T03:06:19.028 scap_db.go:77 Scap database updated. records: '0'
- DEBU 2017-12-11T03:06:19.028 db_ips.go:164 Received update for custom feed IPs - entries 0
- DEBU 2017-12-11T03:06:19.028 controller_processes.go:58 Received local audit settings update &{false true false false}
- DEBU 2017-12-11T03:06:19.028 db_ips.go:180 Updated custom feeds - entries '0'
- DEBU 2017-12-11T03:06:19.028 authorizer.go:116 Policy updated docker (total access: 0 total vulnerabilities: 0)
- DEBU 2017-12-11T03:06:19.028 authorizer.go:116 Policy updated kubernetes (total access: 1 total vulnerabilities: 0)
- DEBU 2017-12-11T03:06:19.028 authorizer.go:116 Policy updated cve (total access: 2 total vulnerabilities: 0)
- DEBU 2017-12-11T03:06:19.028 authorizer.go:116 Policy updated compliance (total access: 2 total vulnerabilities: 1)
- DEBU 2017-12-11T03:06:19.028 container_stopper.go:119 Received blocked containers settings update '&{true}'
- DEBU 2017-12-11T03:06:19.028 container_stopper.go:64 Stopping all '0' blocked containers
- DEBU 2017-12-11T03:06:19.032 container_stopper.go:90 Received update for '0' stopped containers, current '0'
- DEBU 2017-12-11T03:06:19.032 container_stopper.go:64 Stopping all '0' blocked containers
- DEBU 2017-12-11T03:06:19.035 scanner.go:144 Scan is required
- DEBU 2017-12-11T03:06:19.035 scanner.go:142 Update schedule, running: false
- DEBU 2017-12-11T03:06:19.035 scanner.go:162 Stopping the registry scanner. Running: false
- DEBU 2017-12-11T03:06:19.035 scanner.go:142 Update schedule, running: false
- DEBU 2017-12-11T03:06:19.035 scanner.go:91 Update registry settings, running: false total: 0
- DEBU 2017-12-11T03:06:19.035 proxy.go:97 Received update from &{ListenerType: TargetType: KubernetesApiAddress: DefenderAPIAddress:} to {ListenerType:none TargetType:docker KubernetesApiAddress:127.0.0.1:0 DefenderAPIAddress:tcp://:9998}
- DEBU 2017-12-11T03:06:19.035 scanner.go:523 Diagnosing containers
- DEBU 2017-12-11T03:06:19.035 manager.go:65 Updating app firewall policy new:0
- DEBU 2017-12-11T03:06:19.035 manager.go:71 Stopping existing firewalls
- DEBU 2017-12-11T03:06:19.035 manager.go:77 Updating container rules
- DEBU 2017-12-11T03:06:19.035 manager.go:83 Starting new firewalls
- DEBU 2017-12-11T03:06:19.046 scanner.go:55 Scanning container /twistlock_defender_2_2_100 twistlock/private:defender_2_2_100
- DEBU 2017-12-11T03:06:19.047 evaluator_network.go:28 Container "/twistlock_defender_2_2_100" started with network mode "host", skiping network compliance checks
- DEBU 2017-12-11T03:06:19.047 scanner.go:107 Container scanning completed /twistlock_defender_2_2_100 twistlock/private:defender_2_2_100
- DEBU 2017-12-11T03:06:19.060 scanner.go:55 Scanning container /k8s_twistlock-console_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:1b7f06f00a9947c2d331b4eb788b04ee4e8ca8b1f398063f70c48b359affeea3
- DEBU 2017-12-11T03:06:19.086 authorizer.go:125 Secrets policy updated
- DEBU 2017-12-11T03:06:19.093 scanner.go:107 Container scanning completed /k8s_twistlock-console_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:1b7f06f00a9947c2d331b4eb788b04ee4e8ca8b1f398063f70c48b359affeea3
- DEBU 2017-12-11T03:06:19.097 scanner.go:55 Scanning container /k8s_POD_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:19.147 scanner.go:107 Container scanning completed /k8s_POD_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:19.156 scanner.go:55 Scanning container /k8s_sidecar_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-sidecar-amd64@sha256:9aab42bf6a2a068b797fe7d91a5d8d915b10dbbc3d6f2b10492848debfba6044
- DEBU 2017-12-11T03:06:19.187 scanner.go:107 Container scanning completed /k8s_sidecar_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-sidecar-amd64@sha256:9aab42bf6a2a068b797fe7d91a5d8d915b10dbbc3d6f2b10492848debfba6044
- DEBU 2017-12-11T03:06:19.200 scanner.go:55 Scanning container /k8s_dnsmasq_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-dnsmasq-nanny-amd64@sha256:46b933bb70270c8a02fa6b6f87d440f6f1fce1a5a2a719e164f83f7b109f7544
- DEBU 2017-12-11T03:06:19.231 scanner.go:107 Container scanning completed /k8s_dnsmasq_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-dnsmasq-nanny-amd64@sha256:46b933bb70270c8a02fa6b6f87d440f6f1fce1a5a2a719e164f83f7b109f7544
- DEBU 2017-12-11T03:06:19.237 scanner.go:55 Scanning container /k8s_kubedns_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-kube-dns-amd64@sha256:1a3fc069de481ae690188f6f1ba4664b5cc7760af37120f70c86505c79eea61d
- DEBU 2017-12-11T03:06:19.262 scanner.go:107 Container scanning completed /k8s_kubedns_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-kube-dns-amd64@sha256:1a3fc069de481ae690188f6f1ba4664b5cc7760af37120f70c86505c79eea61d
- DEBU 2017-12-11T03:06:19.270 scanner.go:55 Scanning container /k8s_POD_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:19.340 scanner.go:107 Container scanning completed /k8s_POD_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:19.346 scanner.go:55 Scanning container /k8s_prometheus-to-sd-exporter_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google-containers/prometheus-to-sd@sha256:c6aaa681e77e55aa7f7017ca55265accde313f8e2e5484ee1d0a4d89ff741c48
- DEBU 2017-12-11T03:06:19.374 scanner.go:107 Container scanning completed /k8s_prometheus-to-sd-exporter_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google-containers/prometheus-to-sd@sha256:c6aaa681e77e55aa7f7017ca55265accde313f8e2e5484ee1d0a4d89ff741c48
- DEBU 2017-12-11T03:06:19.381 scanner.go:55 Scanning container /k8s_fluentd-gcp_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google-containers/fluentd-gcp@sha256:31a2043cc4dc93208c843cc44d1325f7ebf0d18a863bec738fe62b56965dbf62
- DEBU 2017-12-11T03:06:19.409 scanner.go:107 Container scanning completed /k8s_fluentd-gcp_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google-containers/fluentd-gcp@sha256:31a2043cc4dc93208c843cc44d1325f7ebf0d18a863bec738fe62b56965dbf62
- DEBU 2017-12-11T03:06:19.414 scanner.go:55 Scanning container /k8s_POD_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:19.436 evaluator_network.go:28 Container "/k8s_POD_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0" started with network mode "host", skiping network compliance checks
- DEBU 2017-12-11T03:06:19.436 scanner.go:107 Container scanning completed /k8s_POD_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:19.445 scanner.go:55 Scanning container /k8s_kube-proxy_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 sha256:c9b6f1a423cf41d6fdccb1ca827005f1cc86e5d7d56392df8ddb4437733ae95e
- DEBU 2017-12-11T03:06:19.471 scanner.go:107 Container scanning completed /k8s_kube-proxy_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 sha256:c9b6f1a423cf41d6fdccb1ca827005f1cc86e5d7d56392df8ddb4437733ae95e
- DEBU 2017-12-11T03:06:19.476 scanner.go:55 Scanning container /k8s_POD_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:19.496 evaluator_network.go:28 Container "/k8s_POD_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0" started with network mode "host", skiping network compliance checks
- DEBU 2017-12-11T03:06:19.496 scanner.go:107 Container scanning completed /k8s_POD_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:19.496 scanner.go:599 Containers diagnostics completed
- DEBU 2017-12-11T03:06:19.496 scanner.go:390 Diagnosing host
- INFO 2017-12-11T03:06:19.496 host_scanner_client.go:82 Initializing host scanner
- DEBU 2017-12-11T03:06:19.507 host_scanner_client.go:126 INFO 2017-12-11T03:06:19.507 Host scanning started
- ERRO 2017-12-11T03:06:19.759 proc_tree.go:173 Failed to get path for process, pid: 16248, readlink /proc/16248/exe: no such file or directory
- DEBU 2017-12-11T03:06:20.318 host_scanner_client.go:126 DEBU 2017-12-11T03:06:20.316 Could not find Kubernetes version, paths: [/proc/1549/exe]
- DEBU 2017-12-11T03:06:20.318 host_scanner_client.go:126 DEBU 2017-12-11T03:06:20.318 Evaluating host vulnerabilities. &{ImageAugmentOptions:{IncludePackageFiles:false SkipArchive:true ExtractJAR:false HostScan:true Files:false} DockerAddress:unix:///var/run/docker.sock VulnerabilityIDs: ScanPackages:true}
- DEBU 2017-12-11T03:06:20.319 host_scanner_client.go:126 WARN 2017-12-11T03:06:20.318 Failed to find ubuntu OS distro CHROMEOS_AUSERVER=https://tools.google.com/service/update2
- DEBU 2017-12-11T03:06:20.319 host_scanner_client.go:126 CHROMEOS_BOARD_APPID={76E245CF-C0D0-444D-BA50-36739C18EB00}
- DEBU 2017-12-11T03:06:20.319 host_scanner_client.go:126 CHROMEOS_CANARY_APPID={90F229CE-83E2-4FAF-8479-E368A34938B1}
- DEBU 2017-12-11T03:06:20.319 host_scanner_client.go:126 CHROMEOS_DEVSERVER=
- DEBU 2017-12-11T03:06:20.319 host_scanner_client.go:126 CHROMEOS_RELEASE_APPID={76E245CF-C0D0-444D-BA50-36739C18EB00}
- DEBU 2017-12-11T03:06:20.319 host_scanner_client.go:126 CHROMEOS_RELEASE_BOARD=lakitu-signed-mpkeys
- DEBU 2017-12-11T03:06:20.319 host_scanner_client.go:126 CHROMEOS_RELEASE_BRANCH_NUMBER=90
- DEBU 2017-12-11T03:06:20.319 host_scanner_client.go:126 CHROMEOS_RELEASE_BUILDER_PATH=lakitu-release/R60-9592.90.0
- DEBU 2017-12-11T03:06:20.319 host_scanner_client.go:126 CHROMEOS_RELEASE_BUILD_NUMBER=9592
- DEBU 2017-12-11T03:06:20.319 host_scanner_client.go:126 CHROMEOS_RELEASE_BUILD_TYPE=Official Build
- DEBU 2017-12-11T03:06:20.319 host_scanner_client.go:126 CHROMEOS_RELEASE_CHROME_MILESTONE=60
- DEBU 2017-12-11T03:06:20.319 host_scanner_client.go:126 CHROMEOS_RELEASE_DESCRIPTION=9592.90.0 (Official Build) stable-channel lakitu
- DEBU 2017-12-11T03:06:20.319 host_scanner_client.go:126 CHROMEOS_RELEASE_NAME=Chrome OS
- DEBU 2017-12-11T03:06:20.319 host_scanner_client.go:126 CHROMEOS_RELEASE_PATCH_NUMBER=0
- DEBU 2017-12-11T03:06:20.319 host_scanner_client.go:126 CHROMEOS_RELEASE_TRACK=stable-channel
- DEBU 2017-12-11T03:06:20.319 host_scanner_client.go:126 CHROMEOS_RELEASE_VERSION=9592.90.0
- DEBU 2017-12-11T03:06:20.319 host_scanner_client.go:126 DEVICETYPE=OTHER
- DEBU 2017-12-11T03:06:20.319 host_scanner_client.go:126 GOOGLE_RELEASE=9592.90.0
- DEBU 2017-12-11T03:06:20.319 host_scanner_client.go:126 HWID_OVERRIDE=LAKITU DEFAULT
- DEBU 2017-12-11T03:06:20.319 host_scanner_client.go:126 DEBU 2017-12-11T03:06:20.318 Image Distro cos 60
- DEBU 2017-12-11T03:06:20.319 host_scanner_client.go:126 DEBU 2017-12-11T03:06:20.318 Found packages map[] 0.00 seconds
- DEBU 2017-12-11T03:06:20.443 host_scanner_client.go:119 Received host scanning result
- DEBU 2017-12-11T03:06:20.443 host_scanner_client.go:97 Waiting on host scan command
- DEBU 2017-12-11T03:06:20.443 host_scanner_client.go:102 Host scanning command finished successfully
- DEBU 2017-12-11T03:06:20.444 scanner.go:114 Performing full image scan
- DEBU 2017-12-11T03:06:20.524 scanner.go:161 Image scanning started sha256:884183897e72ee37fd9870dc503ba7ae494ec179ae1ac104270bcd1c637f091c
- DEBU 2017-12-11T03:06:20.540 scanner.go:218 Cached content not found for image us.gcr.io/flexdh-devops/twistlock/private:console_2_2_100
- DEBU 2017-12-11T03:06:20.541 containerized_runner.go:62 Containerized scan started sha256:884183897e72ee37fd9870dc503ba7ae494ec179ae1ac104270bcd1c637f091c
- ERRO 2017-12-11T03:06:20.559 proc_tree.go:173 Failed to get path for process, pid: 2003, readlink /proc/2003/exe: no such file or directory
- INFO 2017-12-11T03:06:20.622 defender.go:943 Process monitoring is enabled
- DEBU 2017-12-11T03:06:20.622 controller_processes.go:227 Initializing container processes (pid:16189)
- DEBU 2017-12-11T03:06:20.622 controller_processes.go:100 Adding process runtime data /twistlock_defender_2_2_100 twistlock/private:defender_2_2_100
- DEBU 2017-12-11T03:06:20.622 controller_processes.go:126 Skipping process monitoring for host mode container /twistlock_defender_2_2_100 twistlock/private:defender_2_2_100
- DEBU 2017-12-11T03:06:20.622 controller_processes.go:100 Adding process runtime data /k8s_twistlock-console_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:1b7f06f00a9947c2d331b4eb788b04ee4e8ca8b1f398063f70c48b359affeea3
- DEBU 2017-12-11T03:06:20.622 controller_processes.go:100 Adding process runtime data /k8s_POD_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:20.622 controller_processes.go:131 Tracking infra container processes using child process /k8s_POD_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:20.622 controller_processes.go:100 Adding process runtime data /k8s_sidecar_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-sidecar-amd64@sha256:9aab42bf6a2a068b797fe7d91a5d8d915b10dbbc3d6f2b10492848debfba6044
- DEBU 2017-12-11T03:06:20.622 controller_processes.go:100 Adding process runtime data /k8s_dnsmasq_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-dnsmasq-nanny-amd64@sha256:46b933bb70270c8a02fa6b6f87d440f6f1fce1a5a2a719e164f83f7b109f7544
- DEBU 2017-12-11T03:06:20.622 controller_processes.go:100 Adding process runtime data /k8s_kubedns_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-kube-dns-amd64@sha256:1a3fc069de481ae690188f6f1ba4664b5cc7760af37120f70c86505c79eea61d
- DEBU 2017-12-11T03:06:20.622 controller_processes.go:100 Adding process runtime data /k8s_POD_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:20.622 controller_processes.go:131 Tracking infra container processes using child process /k8s_POD_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:20.622 controller_processes.go:100 Adding process runtime data /k8s_prometheus-to-sd-exporter_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google-containers/prometheus-to-sd@sha256:c6aaa681e77e55aa7f7017ca55265accde313f8e2e5484ee1d0a4d89ff741c48
- DEBU 2017-12-11T03:06:20.623 controller_processes.go:100 Adding process runtime data /k8s_fluentd-gcp_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google-containers/fluentd-gcp@sha256:31a2043cc4dc93208c843cc44d1325f7ebf0d18a863bec738fe62b56965dbf62
- DEBU 2017-12-11T03:06:20.623 controller_processes.go:100 Adding process runtime data /k8s_POD_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:20.623 controller_processes.go:131 Tracking infra container processes using child process /k8s_POD_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:20.623 controller_processes.go:100 Adding process runtime data /k8s_kube-proxy_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 sha256:c9b6f1a423cf41d6fdccb1ca827005f1cc86e5d7d56392df8ddb4437733ae95e
- DEBU 2017-12-11T03:06:20.623 controller_processes.go:100 Adding process runtime data /k8s_POD_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:20.623 controller_processes.go:131 Tracking infra container processes using child process /k8s_POD_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:20.623 controller_processes.go:244 Namespace: 4026532349 - container: c17715b81b9d5a6eb0ca1036fbfeb43c137f742258a74625f300e32f983e0b6f
- DEBU 2017-12-11T03:06:20.623 controller_processes.go:244 Namespace: 4026532271 - container: 6cf93a7c28066611af85e5ccdeddde46346617abbfb0045a2d6d6106b1ddd845
- DEBU 2017-12-11T03:06:20.623 controller_processes.go:244 Namespace: 4026532268 - container: d4b1df5f083dcd1f6473f54bbf4a7264e54430dabb92b4674c07789932d1a827
- DEBU 2017-12-11T03:06:20.623 controller_processes.go:244 Namespace: 4026532265 - container: 88f719f6d7d3772acc7f2d7b82877909631cb6e4f19f8b34974854f974998b20
- DEBU 2017-12-11T03:06:20.623 controller_processes.go:244 Namespace: 4026532190 - container: 65f933e6dea4845d6be4cac53ec46f67b2ce98a0265e097e14c36ba81dd41f58
- DEBU 2017-12-11T03:06:20.623 controller_processes.go:244 Namespace: 4026532188 - container: 2455e4fd0c00b3682bf6fc04fb491213d857b2961a2f7540f6bdd0196f58525d
- DEBU 2017-12-11T03:06:20.623 controller_processes.go:244 Namespace: 4026532180 - container: 3d461485fc42f81ef21068aec9447726a1a69d1d828f950c06e45acf6c403b0a
- DEBU 2017-12-11T03:06:20.623 controller_processes.go:247 Container process data initialization completed
- DEBU 2017-12-11T03:06:20.623 manager.go:829 Updating runtime policy new:2
- DEBU 2017-12-11T03:06:20.623 manager.go:796 Updating host policy new:1
- DEBU 2017-12-11T03:06:20.623 manager.go:898 Profile update new: 0 total: 0
- ERRO 2017-12-11T03:06:20.642 controller_processes.go:164 Failed to remove process from proc tree: no process found with pid 16362
- DEBU 2017-12-11T03:06:20.744 manager.go:1327 Adding runtime data for /twistlock_defender_2_2_100 twistlock/private:defender_2_2_100
- DEBU 2017-12-11T03:06:21.024 ws.go:301 Received message with type ipFeedChanged
- DEBU 2017-12-11T03:06:21.024 ws.go:301 Received message with type malwareFeedChanged
- DEBU 2017-12-11T03:06:21.024 db_malware.go:52 Received malware db feed change event &{/feeds/malware.json }
- DEBU 2017-12-11T03:06:21.024 api.go:55 Downloading /feeds/malware.json to /data/defender.malware.json
- DEBU 2017-12-11T03:06:21.024 db_ips.go:141 IP feed update. Querying console
- DEBU 2017-12-11T03:06:21.024 api.go:55 Downloading /feeds/ips.json to /data/defender.ips.json
- DEBU 2017-12-11T03:06:21.086 manager.go:1327 Adding runtime data for /k8s_twistlock-console_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:1b7f06f00a9947c2d331b4eb788b04ee4e8ca8b1f398063f70c48b359affeea3
- DEBU 2017-12-11T03:06:21.198 manager.go:1327 Adding runtime data for /k8s_POD_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:21.568 db_malware.go:97 Initializing malware database
- DEBU 2017-12-11T03:06:21.609 manager.go:1327 Adding runtime data for /k8s_sidecar_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-sidecar-amd64@sha256:9aab42bf6a2a068b797fe7d91a5d8d915b10dbbc3d6f2b10492848debfba6044
- DEBU 2017-12-11T03:06:21.802 containerized_runner.go:205
- DEBU 2017-12-11T03:06:21.805 manager.go:1327 Adding runtime data for /k8s_dnsmasq_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-dnsmasq-nanny-amd64@sha256:46b933bb70270c8a02fa6b6f87d440f6f1fce1a5a2a719e164f83f7b109f7544
- DEBU 2017-12-11T03:06:22.157 manager.go:1327 Adding runtime data for /k8s_kubedns_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-kube-dns-amd64@sha256:1a3fc069de481ae690188f6f1ba4664b5cc7760af37120f70c86505c79eea61d
- DEBU 2017-12-11T03:06:22.215 manager.go:1327 Adding runtime data for /k8s_POD_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:22.280 manager.go:1327 Adding runtime data for /k8s_prometheus-to-sd-exporter_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google-containers/prometheus-to-sd@sha256:c6aaa681e77e55aa7f7017ca55265accde313f8e2e5484ee1d0a4d89ff741c48
- DEBU 2017-12-11T03:06:22.333 manager.go:1327 Adding runtime data for /k8s_fluentd-gcp_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google-containers/fluentd-gcp@sha256:31a2043cc4dc93208c843cc44d1325f7ebf0d18a863bec738fe62b56965dbf62
- DEBU 2017-12-11T03:06:22.380 manager.go:1327 Adding runtime data for /k8s_POD_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- INFO 2017-12-11T03:06:22.428 db_malware.go:151 Initializing malware database completed (entries: 20609 total:20609 errors:0 last error:<nil>)
- DEBU 2017-12-11T03:06:22.500 containerized_runner.go:205 DEBU 2017-12-11T03:06:22.470 Image us.gcr.io/flexdh-devops/twistlock/private:console_2_2_100 Distro alpine 3.6.2
- INFO 2017-12-11T03:06:22.481 Searching for special files us.gcr.io/flexdh-devops/twistlock/private:console_2_2_100
- DEBU 2017-12-11T03:06:22.796 manager.go:1327 Adding runtime data for /k8s_kube-proxy_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 sha256:c9b6f1a423cf41d6fdccb1ca827005f1cc86e5d7d56392df8ddb4437733ae95e
- DEBU 2017-12-11T03:06:22.825 manager.go:1327 Adding runtime data for /k8s_POD_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:22.825 manager.go:1390 Adding runtime data for dockerd
- DEBU 2017-12-11T03:06:22.825 manager.go:1390 Adding runtime data for node-problem-de
- DEBU 2017-12-11T03:06:22.825 manager.go:1390 Adding runtime data for health-monitor.
- DEBU 2017-12-11T03:06:22.825 manager.go:1390 Adding runtime data for kubelet
- DEBU 2017-12-11T03:06:22.825 manager.go:1390 Adding runtime data for systemd-journal
- DEBU 2017-12-11T03:06:22.825 manager.go:1390 Adding runtime data for systemd-udevd
- DEBU 2017-12-11T03:06:22.825 manager.go:1390 Adding runtime data for systemd-timesyn
- DEBU 2017-12-11T03:06:22.826 manager.go:1390 Adding runtime data for systemd-logind
- DEBU 2017-12-11T03:06:22.826 manager.go:1390 Adding runtime data for dbus-daemon
- DEBU 2017-12-11T03:06:22.826 manager.go:1390 Adding runtime data for systemd-network
- DEBU 2017-12-11T03:06:22.826 manager.go:1390 Adding runtime data for systemd-resolve
- DEBU 2017-12-11T03:06:22.826 manager.go:1390 Adding runtime data for agetty
- DEBU 2017-12-11T03:06:22.826 manager.go:1390 Adding runtime data for sshd
- DEBU 2017-12-11T03:06:22.826 manager.go:1390 Adding runtime data for google_accounts
- DEBU 2017-12-11T03:06:22.826 manager.go:1390 Adding runtime data for google_clock_sk
- DEBU 2017-12-11T03:06:22.826 manager.go:1390 Adding runtime data for google_ip_forwa
- DEBU 2017-12-11T03:06:22.826 manager.go:1390 Adding runtime data for metrics_daemon
- DEBU 2017-12-11T03:06:22.826 manager.go:1390 Adding runtime data for device_policy_m
- DEBU 2017-12-11T03:06:22.826 manager.go:1390 Adding runtime data for update_engine
- INFO 2017-12-11T03:06:22.826 defender.go:989 System call monitoring is enabled
- DEBU 2017-12-11T03:06:22.883 syscall_audit.go:191 Sending AUDIT_STATUS_ENABLED to netlink socket, sequence: 1
- DEBU 2017-12-11T03:06:22.883 syscall_audit.go:195 Reading netlink socket, sequence: 1
- DEBU 2017-12-11T03:06:22.883 syscall_audit.go:210 Sending AUDIT_STATUS_PID to netlink socket, sequence: 2
- DEBU 2017-12-11T03:06:22.883 syscall_audit.go:215 Reading netlink socket, sequence: 2
- DEBU 2017-12-11T03:06:22.883 syscall_audit.go:219 Reading netlink socket completed, sequence: 2
- DEBU 2017-12-11T03:06:22.883 syscall_audit.go:242 Audit events polling started
- DEBU 2017-12-11T03:06:22.884 syscall_audit.go:321 Deleting all 0 twistlock configured rules
- DEBU 2017-12-11T03:06:22.884 syscall_audit.go:400 Checking syscall auditing state on this host
- DEBU 2017-12-11T03:06:22.886 syscall_audit.go:434 Deleting system calls suppress rule "never audit system calls"
- DEBU 2017-12-11T03:06:22.886 syscall_audit.go:442 System call auditing is enabled
- INFO 2017-12-11T03:06:22.886 defender.go:1011 File system monitoring is enabled
- INFO 2017-12-11T03:06:22.886 tracker_filesystem.go:110 Initializing filesystem monitoring agent fsmon
- DEBU 2017-12-11T03:06:22.916 controller_filesystem.go:410 Bootstrap files found for proc /usr/local/bin/defender: [/data/defender.ips.json.egress.csv /data/defender.ips.json.ingress.csv /var/lib/twistlock/log/defender.log]
- DEBU 2017-12-11T03:06:22.927 controller_filesystem.go:410 Bootstrap files found for proc /usr/bin/mongod: [/var/lib/twistlock/db/WiredTiger.wt /var/lib/twistlock/db/sizeStorer.wt /var/lib/twistlock/db/WiredTigerLAS.wt /var/lib/twistlock/db/_mdb_catalog.wt /var/lib/twistlock/log/db.log /var/lib/twistlock/db/mongod.lock /var/lib/twistlock/db/WiredTiger.lock]
- DEBU 2017-12-11T03:06:22.927 controller_filesystem.go:410 Bootstrap files found for proc /app/server: [/var/lib/twistlock/log/console.log]
- DEBU 2017-12-11T03:06:22.927 db_ips.go:135 Loaded ips, total added:12028 received:45449, errors: 0, last error <nil> 1.43 [sec])
- DEBU 2017-12-11T03:06:22.985 controller_filesystem.go:410 Bootstrap files found for proc /usr/bin/ruby2.1: [/var/log/gcp-salt.pos /var/log/gcp-startupscript.log.pos /var/log/gcp-docker.log.pos /var/log/gcp-etcd.log.pos /var/log/gcp-kubelet.log.pos /var/log/gcp-kube-proxy.log.pos /var/log/gcp-kube-apiserver.log.pos /var/log/gcp-kube-apiserver-audit.log.pos /var/log/gcp-kube-controller-manager.log.pos /var/log/gcp-kube-scheduler.log.pos /var/log/gcp-rescheduler.log.pos /var/log/gcp-glbc.log.pos /var/log/gcp-cluster-autoscaler.log.pos /var/log/gcp-containers.log.pos]
- DEBU 2017-12-11T03:06:23.005 controller_filesystem.go:410 Bootstrap files found for proc /bin/dash: [/var/log/kube-proxy.log /var/log/kube-proxy.log]
- DEBU 2017-12-11T03:06:23.005 controller_filesystem.go:410 Bootstrap files found for proc /usr/local/bin/kube-proxy: [/var/log/kube-proxy.log /var/log/kube-proxy.log]
- DEBU 2017-12-11T03:06:23.011 controller_filesystem.go:376 Container filesystem data initialization completed
- DEBU 2017-12-11T03:06:23.011 controller_filesystem.go:382 Initializing host data
- DEBU 2017-12-11T03:06:23.011 controller_filesystem.go:394 host gke-staging-2-product-default-pool-0a10e6e2-jr7h.c.staging-2-flexcommon.internal namespace: 4026531840
- INFO 2017-12-11T03:06:23.012 defender.go:1050 Network monitoring is enabled
- DEBU 2017-12-11T03:06:23.012 defender.go:1540 Userspace connection tracking events via ctnetlink is enabled
- DEBU 2017-12-11T03:06:23.012 tracker_network_nfqueue_server.go:99 Starting network firewall server
- DEBU 2017-12-11T03:06:23.032 tracker_network_conntrack.go:149 Conntrack started
- DEBU 2017-12-11T03:06:23.058 topology_manager.go:221 Updating topology on new entity for /twistlock_defender_2_2_100 twistlock/private:defender_2_2_100
- DEBU 2017-12-11T03:06:23.065 topology_manager.go:221 Updating topology on new entity for /k8s_twistlock-console_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:1b7f06f00a9947c2d331b4eb788b04ee4e8ca8b1f398063f70c48b359affeea3
- DEBU 2017-12-11T03:06:23.065 network_resolver.go:155 Skipping infra image /k8s_POD_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:23.072 topology_manager.go:221 Updating topology on new entity for /k8s_sidecar_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-sidecar-amd64@sha256:9aab42bf6a2a068b797fe7d91a5d8d915b10dbbc3d6f2b10492848debfba6044
- DEBU 2017-12-11T03:06:23.079 topology_manager.go:221 Updating topology on new entity for /k8s_dnsmasq_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-dnsmasq-nanny-amd64@sha256:46b933bb70270c8a02fa6b6f87d440f6f1fce1a5a2a719e164f83f7b109f7544
- DEBU 2017-12-11T03:06:23.081 tracker_network_nfqueue_server.go:188 Network firewall: DEBU 2017-12-11T03:06:23.081 received policy to NFQueue sensor AUDIT
- DEBU 2017-12-11T03:06:23.085 topology_manager.go:221 Updating topology on new entity for /k8s_kubedns_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-kube-dns-amd64@sha256:1a3fc069de481ae690188f6f1ba4664b5cc7760af37120f70c86505c79eea61d
- DEBU 2017-12-11T03:06:23.085 network_resolver.go:155 Skipping infra image /k8s_POD_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:23.092 topology_manager.go:221 Updating topology on new entity for /k8s_prometheus-to-sd-exporter_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google-containers/prometheus-to-sd@sha256:c6aaa681e77e55aa7f7017ca55265accde313f8e2e5484ee1d0a4d89ff741c48
- DEBU 2017-12-11T03:06:23.099 topology_manager.go:221 Updating topology on new entity for /k8s_fluentd-gcp_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google-containers/fluentd-gcp@sha256:31a2043cc4dc93208c843cc44d1325f7ebf0d18a863bec738fe62b56965dbf62
- DEBU 2017-12-11T03:06:23.099 network_resolver.go:155 Skipping infra image /k8s_POD_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:23.106 topology_manager.go:221 Updating topology on new entity for /k8s_kube-proxy_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 sha256:c9b6f1a423cf41d6fdccb1ca827005f1cc86e5d7d56392df8ddb4437733ae95e
- DEBU 2017-12-11T03:06:23.106 network_resolver.go:155 Skipping infra image /k8s_POD_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:23.106 controller_network.go:179 Adding network runtime data /twistlock_defender_2_2_100 twistlock/private:defender_2_2_100
- DEBU 2017-12-11T03:06:23.106 controller_network.go:179 Adding network runtime data /k8s_twistlock-console_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:1b7f06f00a9947c2d331b4eb788b04ee4e8ca8b1f398063f70c48b359affeea3
- DEBU 2017-12-11T03:06:23.106 controller_network.go:179 Adding network runtime data /k8s_POD_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:23.106 controller_network.go:182 Skipping network detection for infra image /k8s_POD_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:23.106 controller_network.go:179 Adding network runtime data /k8s_sidecar_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-sidecar-amd64@sha256:9aab42bf6a2a068b797fe7d91a5d8d915b10dbbc3d6f2b10492848debfba6044
- DEBU 2017-12-11T03:06:23.106 controller_network.go:179 Adding network runtime data /k8s_dnsmasq_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-dnsmasq-nanny-amd64@sha256:46b933bb70270c8a02fa6b6f87d440f6f1fce1a5a2a719e164f83f7b109f7544
- DEBU 2017-12-11T03:06:23.106 controller_network.go:179 Adding network runtime data /k8s_kubedns_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-kube-dns-amd64@sha256:1a3fc069de481ae690188f6f1ba4664b5cc7760af37120f70c86505c79eea61d
- DEBU 2017-12-11T03:06:23.106 controller_network.go:179 Adding network runtime data /k8s_POD_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:23.106 controller_network.go:182 Skipping network detection for infra image /k8s_POD_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:23.108 controller_network.go:179 Adding network runtime data /k8s_prometheus-to-sd-exporter_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google-containers/prometheus-to-sd@sha256:c6aaa681e77e55aa7f7017ca55265accde313f8e2e5484ee1d0a4d89ff741c48
- DEBU 2017-12-11T03:06:23.108 controller_network.go:179 Adding network runtime data /k8s_fluentd-gcp_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google-containers/fluentd-gcp@sha256:31a2043cc4dc93208c843cc44d1325f7ebf0d18a863bec738fe62b56965dbf62
- DEBU 2017-12-11T03:06:23.108 controller_network.go:179 Adding network runtime data /k8s_POD_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:23.108 controller_network.go:182 Skipping network detection for infra image /k8s_POD_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:23.108 controller_network.go:179 Adding network runtime data /k8s_kube-proxy_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 sha256:c9b6f1a423cf41d6fdccb1ca827005f1cc86e5d7d56392df8ddb4437733ae95e
- DEBU 2017-12-11T03:06:23.108 controller_network.go:179 Adding network runtime data /k8s_POD_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:23.108 controller_network.go:182 Skipping network detection for infra image /k8s_POD_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:23.140 app_profiler.go:83 Applications found [] /twistlock_defender_2_2_100 twistlock/private:defender_2_2_100
- DEBU 2017-12-11T03:06:23.168 app_profiler.go:241 Container: c17715b81b9d5a6eb0ca1036fbfeb43c137f742258a74625f300e32f983e0b6f application: /usr/bin/mongod listens on ports: [27017]
- DEBU 2017-12-11T03:06:23.168 app_profiler.go:83 Applications found [{/usr/bin/mongod [27017] false}] /k8s_twistlock-console_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:1b7f06f00a9947c2d331b4eb788b04ee4e8ca8b1f398063f70c48b359affeea3
- DEBU 2017-12-11T03:06:23.202 app_profiler.go:83 Applications found [] /k8s_POD_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:23.229 app_profiler.go:83 Applications found [] /k8s_sidecar_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-sidecar-amd64@sha256:9aab42bf6a2a068b797fe7d91a5d8d915b10dbbc3d6f2b10492848debfba6044
- DEBU 2017-12-11T03:06:23.256 app_profiler.go:83 Applications found [] /k8s_dnsmasq_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-dnsmasq-nanny-amd64@sha256:46b933bb70270c8a02fa6b6f87d440f6f1fce1a5a2a719e164f83f7b109f7544
- DEBU 2017-12-11T03:06:23.289 app_profiler.go:83 Applications found [] /k8s_kubedns_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-kube-dns-amd64@sha256:1a3fc069de481ae690188f6f1ba4664b5cc7760af37120f70c86505c79eea61d
- DEBU 2017-12-11T03:06:23.315 app_profiler.go:83 Applications found [] /k8s_POD_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:23.342 app_profiler.go:83 Applications found [] /k8s_prometheus-to-sd-exporter_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google-containers/prometheus-to-sd@sha256:c6aaa681e77e55aa7f7017ca55265accde313f8e2e5484ee1d0a4d89ff741c48
- DEBU 2017-12-11T03:06:23.369 app_profiler.go:83 Applications found [] /k8s_fluentd-gcp_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google-containers/fluentd-gcp@sha256:31a2043cc4dc93208c843cc44d1325f7ebf0d18a863bec738fe62b56965dbf62
- DEBU 2017-12-11T03:06:23.397 app_profiler.go:83 Applications found [] /k8s_POD_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:23.427 app_profiler.go:241 Container: 3d461485fc42f81ef21068aec9447726a1a69d1d828f950c06e45acf6c403b0a application: /usr/local/bin/kube-proxy listens on ports: []
- DEBU 2017-12-11T03:06:23.427 app_profiler.go:83 Applications found [{/usr/local/bin/kube-proxy [] true}] /k8s_kube-proxy_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 sha256:c9b6f1a423cf41d6fdccb1ca827005f1cc86e5d7d56392df8ddb4437733ae95e
- DEBU 2017-12-11T03:06:23.480 app_profiler.go:83 Applications found [] /k8s_POD_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:23.480 controller_syscall.go:131 Updating system call rules
- DEBU 2017-12-11T03:06:23.486 scanner.go:302 Next scan in 23h59m55.549191607s
- DEBU 2017-12-11T03:06:23.486 syscall_audit.go:321 Deleting all 0 twistlock configured rules
- INFO 2017-12-11T03:06:23.486 tracker_filesystem.go:75 Updating filesystem policy action: 17 flags: CLOSE_WRITE 4026532189
- DEBU 2017-12-11T03:06:23.486 controller_filesystem.go:300 Tracking /k8s_prometheus-to-sd-exporter_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google-containers/prometheus-to-sd@sha256:c6aaa681e77e55aa7f7017ca55265accde313f8e2e5484ee1d0a4d89ff741c48 pid: 2054 - namespace: 4026532189 - mounts: [/proc/timer_list / /proc /dev/termination-log /etc/hostname /etc/hosts /dev/shm /dev /etc/resolv.conf /proc/kcore] - blacklist: [] - whitelist: []
- INFO 2017-12-11T03:06:23.486 tracker_filesystem.go:75 Updating filesystem policy action: 17 flags: CLOSE_WRITE 4026532347
- DEBU 2017-12-11T03:06:23.486 controller_filesystem.go:300 Tracking /k8s_twistlock-console_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:1b7f06f00a9947c2d331b4eb788b04ee4e8ca8b1f398063f70c48b359affeea3 pid: 10579 - namespace: 4026532347 - mounts: [/dev/shm /data/config /dev/termination-log /var/lib/twistlock-backup /var/lib/twistlock /proc /data /tmp /dev/log /var/log /var/run /etc/hosts /] - blacklist: [] - whitelist: []
- INFO 2017-12-11T03:06:23.486 tracker_filesystem.go:75 Updating filesystem policy action: 17 flags: CLOSE_WRITE 4026532179
- DEBU 2017-12-11T03:06:23.486 controller_filesystem.go:300 Tracking /k8s_kube-proxy_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 sha256:c9b6f1a423cf41d6fdccb1ca827005f1cc86e5d7d56392df8ddb4437733ae95e pid: 1793 - namespace: 4026532179 - mounts: [/etc/resolv.conf /etc/hostname /etc/hosts /proc /sys/fs/cgroup /run/xtables.lock /dev/termination-log /dev/shm /dev /var/log /var/lib/kube-proxy/kubeconfig /] - blacklist: [] - whitelist: []
- INFO 2017-12-11T03:06:23.486 tracker_filesystem.go:75 Updating filesystem policy action: 17 flags: CLOSE_WRITE 4026532269
- DEBU 2017-12-11T03:06:23.486 controller_filesystem.go:300 Tracking /k8s_sidecar_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-sidecar-amd64@sha256:9aab42bf6a2a068b797fe7d91a5d8d915b10dbbc3d6f2b10492848debfba6044 pid: 2502 - namespace: 4026532269 - mounts: [/proc /dev/termination-log /etc/resolv.conf /etc/hostname / /dev /etc/hosts /dev/shm /proc/kcore /proc/timer_list] - blacklist: [] - whitelist: []
- INFO 2017-12-11T03:06:23.486 tracker_filesystem.go:75 Updating filesystem policy action: 17 flags: CLOSE_WRITE 4026532175
- DEBU 2017-12-11T03:06:23.486 controller_filesystem.go:300 Tracking /k8s_POD_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 gcr.io/google_containers/pause-amd64:3.0 pid: 1702 - namespace: 4026532175 - mounts: [/etc/hosts /dev/shm / /proc /dev /etc/resolv.conf /etc/hostname /proc/kcore /proc/timer_list] - blacklist: [] - whitelist: []
- INFO 2017-12-11T03:06:23.486 tracker_filesystem.go:75 Updating filesystem policy action: 17 flags: CLOSE_WRITE 4026532187
- DEBU 2017-12-11T03:06:23.486 controller_filesystem.go:300 Tracking /k8s_fluentd-gcp_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google-containers/fluentd-gcp@sha256:31a2043cc4dc93208c843cc44d1325f7ebf0d18a863bec738fe62b56965dbf62 pid: 1961 - namespace: 4026532187 - mounts: [/var/lib/docker/containers/8cb8914eafda3206094ef2d5b184675229e1186462091162d369eedfe8b2da6e/shm / /etc/hostname /dev/termination-log /var/log /dev/shm /etc/resolv.conf /etc/hosts /etc/fluent/config.d /proc/timer_list /proc /proc/kcore /var/lib/docker/containers/01e42a5b7915e970d3c78c119e45802311ae915bd61d954aa1a020f9e543cc49/shm /dev] - blacklist: [] - whitelist: []
- INFO 2017-12-11T03:06:23.486 tracker_filesystem.go:75 Updating filesystem policy action: 17 flags: CLOSE_WRITE 4026532350
- DEBU 2017-12-11T03:06:23.486 controller_filesystem.go:300 Tracking /twistlock_defender_2_2_100 twistlock/private:defender_2_2_100 pid: 16189 - namespace: 4026532350 - mounts: [/data /tmp /dev/log /var/run /var/tmp /proc /run /dev/shm /var/lib/twistlock /] - blacklist: [] - whitelist: []
- INFO 2017-12-11T03:06:23.486 tracker_filesystem.go:75 Updating filesystem policy action: 17 flags: CLOSE_WRITE 4026532278
- DEBU 2017-12-11T03:06:23.486 controller_filesystem.go:300 Tracking /k8s_POD_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0 pid: 10506 - namespace: 4026532278 - mounts: [/proc/timer_list / /proc /dev /etc/hostname /etc/hosts /etc/resolv.conf /dev/shm /proc/kcore] - blacklist: [] - whitelist: []
- INFO 2017-12-11T03:06:23.487 tracker_filesystem.go:75 Updating filesystem policy action: 17 flags: CLOSE_WRITE 4026532183
- DEBU 2017-12-11T03:06:23.487 controller_filesystem.go:300 Tracking /k8s_POD_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0 pid: 1877 - namespace: 4026532183 - mounts: [/etc/hostname /etc/hosts / /dev /etc/resolv.conf /proc/kcore /proc/timer_list /proc /dev/shm] - blacklist: [] - whitelist: []
- INFO 2017-12-11T03:06:23.487 tracker_filesystem.go:75 Updating filesystem policy action: 17 flags: CLOSE_WRITE 4026532266
- DEBU 2017-12-11T03:06:23.487 controller_filesystem.go:300 Tracking /k8s_dnsmasq_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-dnsmasq-nanny-amd64@sha256:46b933bb70270c8a02fa6b6f87d440f6f1fce1a5a2a719e164f83f7b109f7544 pid: 2377 - namespace: 4026532266 - mounts: [/proc/kcore /dev/termination-log /etc/hostname /dev/shm /etc/hosts /etc/k8s/dns/dnsmasq-nanny /proc/timer_list / /proc /dev /etc/resolv.conf] - blacklist: [] - whitelist: []
- INFO 2017-12-11T03:06:23.488 tracker_filesystem.go:75 Updating filesystem policy action: 17 flags: CLOSE_WRITE 4026532263
- DEBU 2017-12-11T03:06:23.488 controller_filesystem.go:300 Tracking /k8s_kubedns_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-kube-dns-amd64@sha256:1a3fc069de481ae690188f6f1ba4664b5cc7760af37120f70c86505c79eea61d pid: 2304 - namespace: 4026532263 - mounts: [/proc /dev/termination-log /etc/resolv.conf /etc/hostname /etc/hosts /dev/shm /proc/kcore /proc/timer_list / /dev /kube-dns-config] - blacklist: [] - whitelist: []
- INFO 2017-12-11T03:06:23.488 tracker_filesystem.go:75 Updating filesystem policy action: 17 flags: CLOSE_WRITE 4026532191
- DEBU 2017-12-11T03:06:23.488 controller_filesystem.go:300 Tracking /k8s_POD_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0 pid: 2202 - namespace: 4026532191 - mounts: [/ /proc /dev/shm /proc/kcore /etc/hosts /proc/timer_list /dev /etc/resolv.conf /etc/hostname] - blacklist: [] - whitelist: []
- DEBU 2017-12-11T03:06:23.488 controller_filesystem.go:286 Tracking host: false - namespace: 4026531840 - mounts: [/]
- DEBU 2017-12-11T03:06:24.486 defender.go:1351 Stats: 2017-12-11 03:06:24.486 +0000 UTC CPU="1.0 %" VmRSS="26.92 MB" Connected="true" goroutines=31 files=22 procs=148
- DEBU 2017-12-11T03:06:24.521 topology_manager.go:264 Updating network topology [gcr.io/google-containers/prometheus-to-sd:v0.1.3] -> [gcr.io/google-containers/fluentd-gcp:2.0.9] port: 31337. Effect: monitor. Event type: 0
- DEBU 2017-12-11T03:06:24.522 topology_manager.go:264 Updating network topology [gcr.io/google-containers/prometheus-to-sd:v0.1.3] -> [internet] port: 443. Effect: . Event type: 0
- DEBU 2017-12-11T03:06:24.522 topology_manager.go:264 Updating network topology [gcr.io/google-containers/fluentd-gcp:2.0.9] -> [internet] port: 443. Effect: . Event type: 0
- DEBU 2017-12-11T03:06:24.522 topology_manager.go:264 Updating network topology [gcr.io/google_containers/kube-proxy:v1.7.8-gke.0] -> [internet] port: 443. Effect: . Event type: 0
- DEBU 2017-12-11T03:06:24.523 topology_manager.go:264 Updating network topology [twistlock/private:defender_2_2_100] -> [internet] port: 8084. Effect: . Event type: 0
- DEBU 2017-12-11T03:06:24.523 topology_manager.go:264 Updating network topology [us.gcr.io/flexdh-devops/twistlock/private:console_2_2_100] -> [internet] port: 443. Effect: . Event type: 0
- DEBU 2017-12-11T03:06:24.543 scheduler.go:86 Periodic tasks [task:Log rotation cnt:1 duration:4.949893e+06 errs:0] [task:Stats cnt:1 duration:1.000618646e+09 errs:0] [task:ProxyStats cnt:1 duration:2515 errs:0] [task:Resolve services cnt:1 duration:4.070634e+06 errs:0] [task:Connection resolution cnt:1 duration:3.2348321e+07 errs:0] [task:Ports resolution cnt:1 duration:2.0165863e+07 errs:0]
- ERRO 2017-12-11T03:06:29.899 controller_processes.go:164 Failed to remove process from proc tree: no process found with pid 16348
- DEBU 2017-12-11T03:06:30.844 containerized_runner.go:205 INFO 2017-12-11T03:06:30.844 us.gcr.io/flexdh-devops/twistlock/private:console_2_2_100 [find_special_files] 8.37 [sec]
- DEBU 2017-12-11T03:06:30.845 containerized_runner.go:205 DEBU 2017-12-11T03:06:30.844 Static analysis result us.gcr.io/flexdh-devops/twistlock/private:console_2_2_100 candidates:1 binaries: scripts:/usr/bin/start.sh
- DEBU 2017-12-11T03:06:30.844 Searching for additional python script paths under /usr/bin/start.sh
- DEBU 2017-12-11T03:06:30.851 containerized_runner.go:205 DEBU 2017-12-11T03:06:30.851 Static analysis result us.gcr.io/flexdh-devops/twistlock/private:console_2_2_100 candidates:92 binaries:/usr/sbin/logrotate,/usr/bin/openssl,/usr/bin/mongod,/usr/bin/mongo,/bin/busybox,/app/server scripts:
- DEBU 2017-12-11T03:06:30.851 Static analysis result us.gcr.io/flexdh-devops/twistlock/private:console_2_2_100 candidates:1 binaries: scripts:
- DEBU 2017-12-11T03:06:30.851 containerized_runner.go:205 DEBU 2017-12-11T03:06:30.851 [startup_binaries] us.gcr.io/flexdh-devops/twistlock/private:console_2_2_100 0.01 [sec]
- DEBU 2017-12-11T03:06:30.851 containerized_runner.go:205 DEBU 2017-12-11T03:06:30.851 Startup binaries for image us.gcr.io/flexdh-devops/twistlock/private:console_2_2_100: [{logrotate /usr/sbin/logrotate 9cc23f5e0b53e1f23136b5d0f3b39423 0} {openssl /usr/bin/openssl a936a9221445ff66239fd6fb1a13e01f 0} {mongod /usr/bin/mongod 728c739d6d7ad13d5c9d28cea5e34185 0} {mongo /usr/bin/mongo e4de873bdbb810b45099f0708dd8383a 0} {busybox /bin/busybox f17f0ce991f54b22f8351e53968f9f1d 0} {server /app/server 819bd96580769f161a00fb8e5f8cc3a9 0}]
- DEBU 2017-12-11T03:06:31.178 containerized_runner.go:205 DEBU 2017-12-11T03:06:31.178 Found packages us.gcr.io/flexdh-devops/twistlock/private:console_2_2_100 map[nodejs:63 python:1 package:42] 8.71 seconds
- DEBU 2017-12-11T03:06:31.361 containerized_runner.go:192 Containerized scan completed sha256:884183897e72ee37fd9870dc503ba7ae494ec179ae1ac104270bcd1c637f091c 10.82 [sec]
- DEBU 2017-12-11T03:06:31.417 augment_static.go:150 sha256:884183897e72ee37fd9870dc503ba7ae494ec179ae1ac104270bcd1c637f091c [augment] 10.88 [sec]
- DEBU 2017-12-11T03:06:31.427 scanner.go:310 Image us.gcr.io/flexdh-devops/twistlock/private:console_2_2_100 sha256:884183897e72ee37fd9870dc503ba7ae494ec179ae1ac104270bcd1c637f091c [scanning] 10.90 [sec]
- DEBU 2017-12-11T03:06:31.428 scanner.go:161 Image scanning started sha256:c48990706fd7a976a56ea829fd1f4bb719ddd962080f92b922aeb7c62dab2aaf
- DEBU 2017-12-11T03:06:31.443 scanner.go:218 Cached content not found for image docker.io/twistlock/private:defender_2_2_100
- DEBU 2017-12-11T03:06:31.443 containerized_runner.go:62 Containerized scan started sha256:c48990706fd7a976a56ea829fd1f4bb719ddd962080f92b922aeb7c62dab2aaf
- DEBU 2017-12-11T03:06:31.724 containerized_runner.go:205
- DEBU 2017-12-11T03:06:32.012 containerized_runner.go:205 DEBU 2017-12-11T03:06:32.012 Image docker.io/twistlock/private:defender_2_2_100 Distro alpine 3.6.2
- DEBU 2017-12-11T03:06:32.026 containerized_runner.go:205 INFO 2017-12-11T03:06:32.018 Searching for special files docker.io/twistlock/private:defender_2_2_100
- DEBU 2017-12-11T03:06:32.413 containerized_runner.go:205 INFO 2017-12-11T03:06:32.412 docker.io/twistlock/private:defender_2_2_100 [find_special_files] 0.40 [sec]
- DEBU 2017-12-11T03:06:32.413 containerized_runner.go:205 DEBU 2017-12-11T03:06:32.413 Static analysis result docker.io/twistlock/private:defender_2_2_100 candidates:1 binaries:/usr/local/bin/defender scripts:
- DEBU 2017-12-11T03:06:32.413 containerized_runner.go:205 DEBU 2017-12-11T03:06:32.413 [startup_binaries] docker.io/twistlock/private:defender_2_2_100 0.00 [sec]
- DEBU 2017-12-11T03:06:32.413 Startup binaries for image docker.io/twistlock/private:defender_2_2_100: [{defender /usr/local/bin/defender d9b39fafa179e4cc85e6ef4b14211bfa 0}]
- DEBU 2017-12-11T03:06:32.722 containerized_runner.go:205 DEBU 2017-12-11T03:06:32.722 Found packages docker.io/twistlock/private:defender_2_2_100 map[package:44] 0.71 seconds
- DEBU 2017-12-11T03:06:32.873 containerized_runner.go:192 Containerized scan completed sha256:c48990706fd7a976a56ea829fd1f4bb719ddd962080f92b922aeb7c62dab2aaf 1.43 [sec]
- DEBU 2017-12-11T03:06:32.899 augment_static.go:150 sha256:c48990706fd7a976a56ea829fd1f4bb719ddd962080f92b922aeb7c62dab2aaf [augment] 1.46 [sec]
- DEBU 2017-12-11T03:06:32.915 scanner.go:310 Image docker.io/twistlock/private:defender_2_2_100 sha256:c48990706fd7a976a56ea829fd1f4bb719ddd962080f92b922aeb7c62dab2aaf [scanning] 1.49 [sec]
- DEBU 2017-12-11T03:06:32.915 scanner.go:161 Image scanning started sha256:c9b6f1a423cf41d6fdccb1ca827005f1cc86e5d7d56392df8ddb4437733ae95e
- DEBU 2017-12-11T03:06:32.921 scanner.go:218 Cached content not found for image gcr.io/google_containers/kube-proxy:v1.7.8-gke.0
- DEBU 2017-12-11T03:06:32.921 containerized_runner.go:62 Containerized scan started sha256:c9b6f1a423cf41d6fdccb1ca827005f1cc86e5d7d56392df8ddb4437733ae95e
- DEBU 2017-12-11T03:06:33.095 containerized_runner.go:205
- DEBU 2017-12-11T03:06:33.422 containerized_runner.go:205 DEBU 2017-12-11T03:06:33.412 Image gcr.io/google_containers/kube-proxy:v1.7.8-gke.0 Distro debian jessie
- DEBU 2017-12-11T03:06:33.443 containerized_runner.go:205 INFO 2017-12-11T03:06:33.442 Searching for special files gcr.io/google_containers/kube-proxy:v1.7.8-gke.0
- DEBU 2017-12-11T03:06:33.815 containerized_runner.go:205 INFO 2017-12-11T03:06:33.815 gcr.io/google_containers/kube-proxy:v1.7.8-gke.0 [find_special_files] 0.40 [sec]
- DEBU 2017-12-11T03:06:33.816 containerized_runner.go:205 DEBU 2017-12-11T03:06:33.816 Static analysis result gcr.io/google_containers/kube-proxy:v1.7.8-gke.0 candidates:1 binaries:/bin/dash scripts:
- DEBU 2017-12-11T03:06:33.816 containerized_runner.go:205 DEBU 2017-12-11T03:06:33.816 [startup_binaries] gcr.io/google_containers/kube-proxy:v1.7.8-gke.0 0.00 [sec]
- DEBU 2017-12-11T03:06:33.816 Startup binaries for image gcr.io/google_containers/kube-proxy:v1.7.8-gke.0: [{dash /bin/dash f75c4bdc46c230bdcf247c3c309a07ce 0}]
- DEBU 2017-12-11T03:06:33.934 defender.go:1227 Already connected. Skipping using cached data
- DEBU 2017-12-11T03:06:34.079 containerized_runner.go:205 DEBU 2017-12-11T03:06:34.079 Found packages gcr.io/google_containers/kube-proxy:v1.7.8-gke.0 map[package:61] 0.67 seconds
- DEBU 2017-12-11T03:06:34.214 containerized_runner.go:192 Containerized scan completed sha256:c9b6f1a423cf41d6fdccb1ca827005f1cc86e5d7d56392df8ddb4437733ae95e 1.29 [sec]
- DEBU 2017-12-11T03:06:34.231 augment_static.go:150 sha256:c9b6f1a423cf41d6fdccb1ca827005f1cc86e5d7d56392df8ddb4437733ae95e [augment] 1.31 [sec]
- DEBU 2017-12-11T03:06:34.246 scanner.go:310 Image gcr.io/google_containers/kube-proxy:v1.7.8-gke.0 sha256:c9b6f1a423cf41d6fdccb1ca827005f1cc86e5d7d56392df8ddb4437733ae95e [scanning] 1.33 [sec]
- DEBU 2017-12-11T03:06:34.249 scanner.go:161 Image scanning started sha256:fed89e8b4248a788655d528d96fe644aff012879c782784cd486ff6894ef89f6
- DEBU 2017-12-11T03:06:34.256 scanner.go:218 Cached content not found for image gcr.io/google_containers/k8s-dns-sidecar-amd64:1.14.5
- DEBU 2017-12-11T03:06:34.256 containerized_runner.go:62 Containerized scan started sha256:fed89e8b4248a788655d528d96fe644aff012879c782784cd486ff6894ef89f6
- DEBU 2017-12-11T03:06:34.415 containerized_runner.go:205
- DEBU 2017-12-11T03:06:34.751 containerized_runner.go:205 DEBU 2017-12-11T03:06:34.749 Image gcr.io/google_containers/k8s-dns-sidecar-amd64:1.14.5 Distro alpine 3.6.2
- INFO 2017-12-11T03:06:34.750 Searching for special files gcr.io/google_containers/k8s-dns-sidecar-amd64:1.14.5
- DEBU 2017-12-11T03:06:34.911 containerized_runner.go:205 INFO 2017-12-11T03:06:34.911 gcr.io/google_containers/k8s-dns-sidecar-amd64:1.14.5 [find_special_files] 0.17 [sec]
- DEBU 2017-12-11T03:06:34.911 containerized_runner.go:205 DEBU 2017-12-11T03:06:34.911 Static analysis result gcr.io/google_containers/k8s-dns-sidecar-amd64:1.14.5 candidates:1 binaries:/sidecar scripts:
- DEBU 2017-12-11T03:06:34.912 containerized_runner.go:205 DEBU 2017-12-11T03:06:34.911 [startup_binaries] gcr.io/google_containers/k8s-dns-sidecar-amd64:1.14.5 0.00 [sec]
- DEBU 2017-12-11T03:06:34.911 Startup binaries for image gcr.io/google_containers/k8s-dns-sidecar-amd64:1.14.5: [{sidecar /sidecar a71c338aacc420401f3802eeb3c80d08 0}]
- DEBU 2017-12-11T03:06:35.117 containerized_runner.go:205 DEBU 2017-12-11T03:06:35.117 Found packages gcr.io/google_containers/k8s-dns-sidecar-amd64:1.14.5 map[package:11] 0.37 seconds
- DEBU 2017-12-11T03:06:35.225 containerized_runner.go:192 Containerized scan completed sha256:fed89e8b4248a788655d528d96fe644aff012879c782784cd486ff6894ef89f6 0.97 [sec]
- DEBU 2017-12-11T03:06:35.242 augment_static.go:150 sha256:fed89e8b4248a788655d528d96fe644aff012879c782784cd486ff6894ef89f6 [augment] 0.99 [sec]
- DEBU 2017-12-11T03:06:35.250 scanner.go:310 Image gcr.io/google_containers/k8s-dns-sidecar-amd64:1.14.5 sha256:fed89e8b4248a788655d528d96fe644aff012879c782784cd486ff6894ef89f6 [scanning] 1.00 [sec]
- DEBU 2017-12-11T03:06:35.250 scanner.go:161 Image scanning started sha256:512cd7425a731bee1f2a3e4c825fc1cfe516c8b7905874f24bee6da12801d663
- DEBU 2017-12-11T03:06:35.258 scanner.go:218 Cached content not found for image gcr.io/google_containers/k8s-dns-kube-dns-amd64:1.14.5
- DEBU 2017-12-11T03:06:35.258 containerized_runner.go:62 Containerized scan started sha256:512cd7425a731bee1f2a3e4c825fc1cfe516c8b7905874f24bee6da12801d663
- DEBU 2017-12-11T03:06:35.418 containerized_runner.go:205
- DEBU 2017-12-11T03:06:35.733 containerized_runner.go:205 DEBU 2017-12-11T03:06:35.723 Image gcr.io/google_containers/k8s-dns-kube-dns-amd64:1.14.5 Distro alpine 3.6.2
- INFO 2017-12-11T03:06:35.723 Searching for special files gcr.io/google_containers/k8s-dns-kube-dns-amd64:1.14.5
- DEBU 2017-12-11T03:06:35.904 containerized_runner.go:205 INFO 2017-12-11T03:06:35.904 gcr.io/google_containers/k8s-dns-kube-dns-amd64:1.14.5 [find_special_files] 0.18 [sec]
- DEBU 2017-12-11T03:06:35.905 containerized_runner.go:205 DEBU 2017-12-11T03:06:35.905 Static analysis result gcr.io/google_containers/k8s-dns-kube-dns-amd64:1.14.5 candidates:1 binaries:/kube-dns scripts:
- DEBU 2017-12-11T03:06:35.905 containerized_runner.go:205 DEBU 2017-12-11T03:06:35.905 [startup_binaries] gcr.io/google_containers/k8s-dns-kube-dns-amd64:1.14.5 0.00 [sec]
- DEBU 2017-12-11T03:06:35.905 containerized_runner.go:205 DEBU 2017-12-11T03:06:35.905 Startup binaries for image gcr.io/google_containers/k8s-dns-kube-dns-amd64:1.14.5: [{kube-dns /kube-dns a40385a941251cab366fa275f66fc808 0}]
- DEBU 2017-12-11T03:06:36.107 containerized_runner.go:205 DEBU 2017-12-11T03:06:36.107 Found packages gcr.io/google_containers/k8s-dns-kube-dns-amd64:1.14.5 map[package:11] 0.38 seconds
- DEBU 2017-12-11T03:06:36.210 containerized_runner.go:192 Containerized scan completed sha256:512cd7425a731bee1f2a3e4c825fc1cfe516c8b7905874f24bee6da12801d663 0.95 [sec]
- DEBU 2017-12-11T03:06:36.232 augment_static.go:150 sha256:512cd7425a731bee1f2a3e4c825fc1cfe516c8b7905874f24bee6da12801d663 [augment] 0.97 [sec]
- DEBU 2017-12-11T03:06:36.245 scanner.go:310 Image gcr.io/google_containers/k8s-dns-kube-dns-amd64:1.14.5 sha256:512cd7425a731bee1f2a3e4c825fc1cfe516c8b7905874f24bee6da12801d663 [scanning] 1.00 [sec]
- DEBU 2017-12-11T03:06:36.246 scanner.go:161 Image scanning started sha256:459944ce8cc4f08ebade5c05bb884e4da053d73e61ec6afe82a0b1687317254c
- DEBU 2017-12-11T03:06:36.252 scanner.go:218 Cached content not found for image gcr.io/google_containers/k8s-dns-dnsmasq-nanny-amd64:1.14.5
- DEBU 2017-12-11T03:06:36.253 containerized_runner.go:62 Containerized scan started sha256:459944ce8cc4f08ebade5c05bb884e4da053d73e61ec6afe82a0b1687317254c
- DEBU 2017-12-11T03:06:36.411 containerized_runner.go:205
- DEBU 2017-12-11T03:06:36.757 containerized_runner.go:205 DEBU 2017-12-11T03:06:36.752 Image gcr.io/google_containers/k8s-dns-dnsmasq-nanny-amd64:1.14.5 Distro alpine 3.6.2
- DEBU 2017-12-11T03:06:36.762 containerized_runner.go:205 INFO 2017-12-11T03:06:36.757 Searching for special files gcr.io/google_containers/k8s-dns-dnsmasq-nanny-amd64:1.14.5
- DEBU 2017-12-11T03:06:36.919 containerized_runner.go:205 INFO 2017-12-11T03:06:36.918 gcr.io/google_containers/k8s-dns-dnsmasq-nanny-amd64:1.14.5 [find_special_files] 0.17 [sec]
- DEBU 2017-12-11T03:06:36.919 containerized_runner.go:205 DEBU 2017-12-11T03:06:36.919 Static analysis result gcr.io/google_containers/k8s-dns-dnsmasq-nanny-amd64:1.14.5 candidates:1 binaries:/dnsmasq-nanny scripts:
- DEBU 2017-12-11T03:06:36.919 containerized_runner.go:205 DEBU 2017-12-11T03:06:36.919 [startup_binaries] gcr.io/google_containers/k8s-dns-dnsmasq-nanny-amd64:1.14.5 0.00 [sec]
- DEBU 2017-12-11T03:06:36.919 Startup binaries for image gcr.io/google_containers/k8s-dns-dnsmasq-nanny-amd64:1.14.5: [{dnsmasq-nanny /dnsmasq-nanny 393ba7642e7033bb904b4a23f208336f 0}]
- DEBU 2017-12-11T03:06:37.124 containerized_runner.go:205 DEBU 2017-12-11T03:06:37.123 Found packages gcr.io/google_containers/k8s-dns-dnsmasq-nanny-amd64:1.14.5 map[package:11] 0.37 seconds
- DEBU 2017-12-11T03:06:37.219 containerized_runner.go:192 Containerized scan completed sha256:459944ce8cc4f08ebade5c05bb884e4da053d73e61ec6afe82a0b1687317254c 0.97 [sec]
- DEBU 2017-12-11T03:06:37.238 augment_static.go:150 sha256:459944ce8cc4f08ebade5c05bb884e4da053d73e61ec6afe82a0b1687317254c [augment] 0.99 [sec]
- DEBU 2017-12-11T03:06:37.249 scanner.go:310 Image gcr.io/google_containers/k8s-dns-dnsmasq-nanny-amd64:1.14.5 sha256:459944ce8cc4f08ebade5c05bb884e4da053d73e61ec6afe82a0b1687317254c [scanning] 1.00 [sec]
- DEBU 2017-12-11T03:06:37.249 scanner.go:161 Image scanning started sha256:fa5e579ee511eaa2cccd571aca13011a028beb44670f8bb5a22aa023ee0726d5
- DEBU 2017-12-11T03:06:37.257 scanner.go:218 Cached content not found for image gcr.io/google-containers/fluentd-gcp:2.0.9
- DEBU 2017-12-11T03:06:37.257 containerized_runner.go:62 Containerized scan started sha256:fa5e579ee511eaa2cccd571aca13011a028beb44670f8bb5a22aa023ee0726d5
- DEBU 2017-12-11T03:06:37.767 containerized_runner.go:205
- DEBU 2017-12-11T03:06:37.770 containerized_runner.go:205 DEBU 2017-12-11T03:06:37.765 Image gcr.io/google-containers/fluentd-gcp:2.0.9 Distro debian jessie
- DEBU 2017-12-11T03:06:37.789 containerized_runner.go:205 INFO 2017-12-11T03:06:37.777 Searching for special files gcr.io/google-containers/fluentd-gcp:2.0.9
- DEBU 2017-12-11T03:06:39.666 containerized_runner.go:205 INFO 2017-12-11T03:06:39.666 gcr.io/google-containers/fluentd-gcp:2.0.9 [find_special_files] 1.90 [sec]
- DEBU 2017-12-11T03:06:39.667 containerized_runner.go:205 DEBU 2017-12-11T03:06:39.667 Static analysis result gcr.io/google-containers/fluentd-gcp:2.0.9 candidates:1 binaries:/bin/dash scripts:
- DEBU 2017-12-11T03:06:39.667 Static analysis result gcr.io/google-containers/fluentd-gcp:2.0.9 candidates:0 binaries: scripts:
- DEBU 2017-12-11T03:06:39.667 containerized_runner.go:205 DEBU 2017-12-11T03:06:39.667 Static analysis result gcr.io/google-containers/fluentd-gcp:2.0.9 candidates:2 binaries: scripts:/run.sh
- DEBU 2017-12-11T03:06:39.667 Searching for additional python script paths under /run.sh
- DEBU 2017-12-11T03:06:39.668 containerized_runner.go:205 DEBU 2017-12-11T03:06:39.668 Static analysis result gcr.io/google-containers/fluentd-gcp:2.0.9 candidates:8 binaries:/bin/mkdir,/bin/ls,/bin/rm,/bin/cp scripts:/usr/local/bin/fluentd
- DEBU 2017-12-11T03:06:39.670 containerized_runner.go:205 DEBU 2017-12-11T03:06:39.670 Static analysis result gcr.io/google-containers/fluentd-gcp:2.0.9 candidates:22 binaries: scripts:/usr/bin/gem2.1
- DEBU 2017-12-11T03:06:39.670 [startup_binaries] gcr.io/google-containers/fluentd-gcp:2.0.9 0.00 [sec]
- DEBU 2017-12-11T03:06:39.670 Startup binaries for image gcr.io/google-containers/fluentd-gcp:2.0.9: [{dash /bin/dash f75c4bdc46c230bdcf247c3c309a07ce 0} {mkdir /bin/mkdir b5f2a443555bbb34e49702f9541d13a8 0} {ls /bin/ls 2eb1a3e346933962bdfbb7b118404b68 0} {rm /bin/rm 2314b8d72ef05e807b99a0963a117692 0} {cp /bin/cp 1d56ef7971fd5e674eb467cac6edf2aa 0}]
- DEBU 2017-12-11T03:06:39.791 containerized_runner.go:205 ERRO 2017-12-11T03:06:39.791 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- ERRO 2017-12-11T03:06:39.791 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- ERRO 2017-12-11T03:06:39.791 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- ERRO 2017-12-11T03:06:39.791 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- ERRO 2017-12-11T03:06:39.791 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- ERRO 2017-12-11T03:06:39.791 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- ERRO 2017-12-11T03:06:39.791 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- DEBU 2017-12-11T03:06:39.791 containerized_runner.go:205 ERRO 2017-12-11T03:06:39.791 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- ERRO 2017-12-11T03:06:39.791 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- DEBU 2017-12-11T03:06:39.791 containerized_runner.go:205 ERRO 2017-12-11T03:06:39.791 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- ERRO 2017-12-11T03:06:39.791 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- DEBU 2017-12-11T03:06:39.791 containerized_runner.go:205 ERRO 2017-12-11T03:06:39.791 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- ERRO 2017-12-11T03:06:39.791 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- DEBU 2017-12-11T03:06:39.792 containerized_runner.go:205 ERRO 2017-12-11T03:06:39.791 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- ERRO 2017-12-11T03:06:39.792 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- DEBU 2017-12-11T03:06:39.792 containerized_runner.go:205 ERRO 2017-12-11T03:06:39.792 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- DEBU 2017-12-11T03:06:39.792 containerized_runner.go:205 ERRO 2017-12-11T03:06:39.792 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- ERRO 2017-12-11T03:06:39.792 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- DEBU 2017-12-11T03:06:39.792 containerized_runner.go:205 ERRO 2017-12-11T03:06:39.792 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- ERRO 2017-12-11T03:06:39.792 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- ERRO 2017-12-11T03:06:39.792 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- ERRO 2017-12-11T03:06:39.792 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- DEBU 2017-12-11T03:06:39.792 containerized_runner.go:205 ERRO 2017-12-11T03:06:39.792 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- ERRO 2017-12-11T03:06:39.792 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- ERRO 2017-12-11T03:06:39.792 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- DEBU 2017-12-11T03:06:39.793 containerized_runner.go:205 ERRO 2017-12-11T03:06:39.792 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- ERRO 2017-12-11T03:06:39.792 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- DEBU 2017-12-11T03:06:39.793 containerized_runner.go:205 ERRO 2017-12-11T03:06:39.793 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- ERRO 2017-12-11T03:06:39.793 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- DEBU 2017-12-11T03:06:39.793 containerized_runner.go:205 ERRO 2017-12-11T03:06:39.793 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- DEBU 2017-12-11T03:06:39.794 containerized_runner.go:205 ERRO 2017-12-11T03:06:39.793 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- ERRO 2017-12-11T03:06:39.793 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- ERRO 2017-12-11T03:06:39.793 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- DEBU 2017-12-11T03:06:39.797 containerized_runner.go:205 ERRO 2017-12-11T03:06:39.794 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- DEBU 2017-12-11T03:06:39.797 containerized_runner.go:205 ERRO 2017-12-11T03:06:39.796 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- ERRO 2017-12-11T03:06:39.796 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- ERRO 2017-12-11T03:06:39.796 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- ERRO 2017-12-11T03:06:39.796 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- ERRO 2017-12-11T03:06:39.796 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- ERRO 2017-12-11T03:06:39.796 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- ERRO 2017-12-11T03:06:39.796 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- ERRO 2017-12-11T03:06:39.796 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- ERRO 2017-12-11T03:06:39.796 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- ERRO 2017-12-11T03:06:39.796 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- ERRO 2017-12-11T03:06:39.796 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- ERRO 2017-12-11T03:06:39.797 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- ERRO 2017-12-11T03:06:39.797 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- ERRO 2017-12-11T03:06:39.797 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- DEBU 2017-12-11T03:06:39.798 containerized_runner.go:205 ERRO 2017-12-11T03:06:39.798 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- DEBU 2017-12-11T03:06:39.798 containerized_runner.go:205 ERRO 2017-12-11T03:06:39.798 failed to find gem version "\x04\bu:\x17Gem::" Marshal.4.8
- DEBU 2017-12-11T03:06:39.869 containerized_runner.go:205 ERRO 2017-12-11T03:06:39.869 failed to find gem version "lib = File" google-api-client-0.9.28
- DEBU 2017-12-11T03:06:39.882 containerized_runner.go:205 DEBU 2017-12-11T03:06:39.882 Deduping duplicate gem "json"
- DEBU 2017-12-11T03:06:39.887 containerized_runner.go:205 ERRO 2017-12-11T03:06:39.886 failed to find gem version "# -*- enco" multipart-post-2.0.0
- DEBU 2017-12-11T03:06:39.890 containerized_runner.go:205 ERRO 2017-12-11T03:06:39.890 failed to find gem version "# -*- enco" systemd-journal-1.3.0
- DEBU 2017-12-11T03:06:39.897 containerized_runner.go:205 ERRO 2017-12-11T03:06:39.896 failed to find gem version "require '." yajl-ruby-1.3.0
- DEBU 2017-12-11T03:06:39.897 containerized_runner.go:205 DEBU 2017-12-11T03:06:39.897 Deduping duplicate gem "cool.io"
- DEBU 2017-12-11T03:06:39.897 containerized_runner.go:205 DEBU 2017-12-11T03:06:39.897 Deduping duplicate gem "ffi"
- DEBU 2017-12-11T03:06:39.898 containerized_runner.go:205 DEBU 2017-12-11T03:06:39.897 Deduping duplicate gem "fluent-plugin-prometheus"
- DEBU 2017-12-11T03:06:39.898 containerized_runner.go:205 DEBU 2017-12-11T03:06:39.898 Deduping duplicate gem "fluent-plugin-record-reformer"
- DEBU 2017-12-11T03:06:39.898 containerized_runner.go:205 DEBU 2017-12-11T03:06:39.898 Deduping duplicate gem "fluentd"
- DEBU 2017-12-11T03:06:39.899 containerized_runner.go:205 DEBU 2017-12-11T03:06:39.899 Deduping duplicate gem "googleauth"
- DEBU 2017-12-11T03:06:39.900 containerized_runner.go:205 DEBU 2017-12-11T03:06:39.899 Deduping duplicate gem "http_parser.rb"
- DEBU 2017-12-11T03:06:39.899 Deduping duplicate gem "json"
- DEBU 2017-12-11T03:06:39.900 containerized_runner.go:205 DEBU 2017-12-11T03:06:39.900 Deduping duplicate gem "memoist"
- DEBU 2017-12-11T03:06:39.900 containerized_runner.go:205 DEBU 2017-12-11T03:06:39.900 Deduping duplicate gem "msgpack"
- DEBU 2017-12-11T03:06:39.901 containerized_runner.go:205 DEBU 2017-12-11T03:06:39.901 Deduping duplicate gem "public_suffix"
- DEBU 2017-12-11T03:06:39.901 containerized_runner.go:205 DEBU 2017-12-11T03:06:39.901 Deduping duplicate gem "representable"
- DEBU 2017-12-11T03:06:39.901 containerized_runner.go:205 DEBU 2017-12-11T03:06:39.901 Deduping duplicate gem "retriable"
- DEBU 2017-12-11T03:06:39.901 containerized_runner.go:205 DEBU 2017-12-11T03:06:39.901 Deduping duplicate gem "rly"
- DEBU 2017-12-11T03:06:39.901 Deduping duplicate gem "sigdump"
- DEBU 2017-12-11T03:06:39.901 containerized_runner.go:205 DEBU 2017-12-11T03:06:39.901 Deduping duplicate gem "signet"
- DEBU 2017-12-11T03:06:39.902 containerized_runner.go:205 DEBU 2017-12-11T03:06:39.901 Deduping duplicate gem "string-scrub"
- DEBU 2017-12-11T03:06:39.902 containerized_runner.go:205 DEBU 2017-12-11T03:06:39.902 Deduping duplicate gem "thread_safe"
- DEBU 2017-12-11T03:06:39.902 containerized_runner.go:205 DEBU 2017-12-11T03:06:39.902 Deduping duplicate gem "uber"
- DEBU 2017-12-11T03:06:40.125 containerized_runner.go:205 DEBU 2017-12-11T03:06:40.125 Found packages gcr.io/google-containers/fluentd-gcp:2.0.9 map[gem:66 package:66] 2.36 seconds
- DEBU 2017-12-11T03:06:40.243 containerized_runner.go:192 Containerized scan completed sha256:fa5e579ee511eaa2cccd571aca13011a028beb44670f8bb5a22aa023ee0726d5 2.99 [sec]
- DEBU 2017-12-11T03:06:40.261 augment_static.go:150 sha256:fa5e579ee511eaa2cccd571aca13011a028beb44670f8bb5a22aa023ee0726d5 [augment] 3.00 [sec]
- DEBU 2017-12-11T03:06:40.278 scanner.go:310 Image gcr.io/google-containers/fluentd-gcp:2.0.9 sha256:fa5e579ee511eaa2cccd571aca13011a028beb44670f8bb5a22aa023ee0726d5 [scanning] 3.03 [sec]
- DEBU 2017-12-11T03:06:40.279 scanner.go:161 Image scanning started sha256:5e65193af899d141f6a1375472c1bc46e0ee0eb7b9a45776fa63957fadb19188
- DEBU 2017-12-11T03:06:40.296 scanner.go:218 Cached content not found for image gcr.io/google-containers/prometheus-to-sd:v0.1.3
- DEBU 2017-12-11T03:06:40.296 containerized_runner.go:62 Containerized scan started sha256:5e65193af899d141f6a1375472c1bc46e0ee0eb7b9a45776fa63957fadb19188
- DEBU 2017-12-11T03:06:40.755 containerized_runner.go:205
- DEBU 2017-12-11T03:06:40.758 containerized_runner.go:205 DEBU 2017-12-11T03:06:40.754 Image gcr.io/google-containers/prometheus-to-sd:v0.1.3 Distro debian jessie
- DEBU 2017-12-11T03:06:40.768 containerized_runner.go:205 INFO 2017-12-11T03:06:40.762 Searching for special files gcr.io/google-containers/prometheus-to-sd:v0.1.3
- DEBU 2017-12-11T03:06:41.035 containerized_runner.go:205 INFO 2017-12-11T03:06:41.035 gcr.io/google-containers/prometheus-to-sd:v0.1.3 [find_special_files] 0.28 [sec]
- DEBU 2017-12-11T03:06:41.036 containerized_runner.go:205 DEBU 2017-12-11T03:06:41.036 Static analysis result gcr.io/google-containers/prometheus-to-sd:v0.1.3 candidates:1 binaries:/bin/dash scripts:
- DEBU 2017-12-11T03:06:41.036 [startup_binaries] gcr.io/google-containers/prometheus-to-sd:v0.1.3 0.00 [sec]
- DEBU 2017-12-11T03:06:41.036 containerized_runner.go:205 DEBU 2017-12-11T03:06:41.036 Startup binaries for image gcr.io/google-containers/prometheus-to-sd:v0.1.3: [{dash /bin/dash f75c4bdc46c230bdcf247c3c309a07ce 0}]
- DEBU 2017-12-11T03:06:41.293 containerized_runner.go:205 DEBU 2017-12-11T03:06:41.293 Found packages gcr.io/google-containers/prometheus-to-sd:v0.1.3 map[package:57] 0.54 seconds
- DEBU 2017-12-11T03:06:41.394 containerized_runner.go:192 Containerized scan completed sha256:5e65193af899d141f6a1375472c1bc46e0ee0eb7b9a45776fa63957fadb19188 1.10 [sec]
- DEBU 2017-12-11T03:06:41.412 augment_static.go:150 sha256:5e65193af899d141f6a1375472c1bc46e0ee0eb7b9a45776fa63957fadb19188 [augment] 1.12 [sec]
- DEBU 2017-12-11T03:06:41.426 scanner.go:310 Image gcr.io/google-containers/prometheus-to-sd:v0.1.3 sha256:5e65193af899d141f6a1375472c1bc46e0ee0eb7b9a45776fa63957fadb19188 [scanning] 1.15 [sec]
- DEBU 2017-12-11T03:06:41.427 scanner.go:161 Image scanning started sha256:99e59f495ffaa222bfeb67580213e8c28c1e885f1d245ab2bbe3b1b1ec3bd0b2
- DEBU 2017-12-11T03:06:41.433 scanner.go:218 Cached content not found for image gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:41.433 containerized_runner.go:62 Containerized scan started sha256:99e59f495ffaa222bfeb67580213e8c28c1e885f1d245ab2bbe3b1b1ec3bd0b2
- DEBU 2017-12-11T03:06:41.598 containerized_runner.go:205
- DEBU 2017-12-11T03:06:41.906 containerized_runner.go:205 WARN 2017-12-11T03:06:41.903 Failed to find distro information in /
- DEBU 2017-12-11T03:06:41.903 Image gcr.io/google_containers/pause-amd64:3.0 Distro
- INFO 2017-12-11T03:06:41.903 Searching for special files gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:06:41.997 containerized_runner.go:205 INFO 2017-12-11T03:06:41.996 gcr.io/google_containers/pause-amd64:3.0 [find_special_files] 0.09 [sec]
- DEBU 2017-12-11T03:06:41.997 containerized_runner.go:205 DEBU 2017-12-11T03:06:41.997 Static analysis result gcr.io/google_containers/pause-amd64:3.0 candidates:1 binaries:/pause scripts:
- DEBU 2017-12-11T03:06:41.997 [startup_binaries] gcr.io/google_containers/pause-amd64:3.0 0.00 [sec]
- DEBU 2017-12-11T03:06:41.997 Startup binaries for image gcr.io/google_containers/pause-amd64:3.0: [{pause /pause da33dc5ef65f24fbd2350196e8b4ac69 0}]
- DEBU 2017-12-11T03:06:42.180 containerized_runner.go:205 DEBU 2017-12-11T03:06:42.179 Found packages gcr.io/google_containers/pause-amd64:3.0 map[] 0.28 seconds
- DEBU 2017-12-11T03:06:42.277 containerized_runner.go:192 Containerized scan completed sha256:99e59f495ffaa222bfeb67580213e8c28c1e885f1d245ab2bbe3b1b1ec3bd0b2 0.84 [sec]
- DEBU 2017-12-11T03:06:42.294 augment_static.go:150 sha256:99e59f495ffaa222bfeb67580213e8c28c1e885f1d245ab2bbe3b1b1ec3bd0b2 [augment] 0.86 [sec]
- DEBU 2017-12-11T03:06:42.303 scanner.go:310 Image gcr.io/google_containers/pause-amd64:3.0 sha256:99e59f495ffaa222bfeb67580213e8c28c1e885f1d245ab2bbe3b1b1ec3bd0b2 [scanning] 0.88 [sec]
- DEBU 2017-12-11T03:06:42.303 scanner.go:755 Image diagnostics completed, total: 9 time 21.86
- DEBU 2017-12-11T03:06:42.310 scanner.go:334 Rescheduling docker diagnose
- DEBU 2017-12-11T03:06:42.310 scanner.go:302 Next scan in 23h59m36.725120524s
- DEBU 2017-12-11T03:08:28.821 scanner.go:491 Scanning container a82f03a56cd8ab691b66f0f8d44db2146985303a71e5c34acfe46ea2c62de548
- DEBU 2017-12-11T03:08:28.838 scanner.go:55 Scanning container /k8s_POD_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:28.838 evaluator_network.go:28 Container "/k8s_POD_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0" started with network mode "host", skiping network compliance checks
- DEBU 2017-12-11T03:08:28.838 scanner.go:107 Container scanning completed /k8s_POD_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:28.860 manager.go:1327 Adding runtime data for /k8s_POD_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:28.892 app_profiler.go:83 Applications found [] /k8s_POD_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:28.892 manager.go:282 Skipping infra image /k8s_POD_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:28.892 network_resolver.go:155 Skipping infra image /k8s_POD_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:28.892 controller_processes.go:100 Adding process runtime data /k8s_POD_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:28.892 controller_processes.go:126 Skipping process monitoring for host mode container /k8s_POD_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:28.892 controller_syscall.go:91 Container created, adding syscall monitoring to "/k8s_POD_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0"
- DEBU 2017-12-11T03:08:28.892 controller_filesystem.go:257 Adding filesystem runtime data /k8s_POD_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- INFO 2017-12-11T03:08:28.897 tracker_filesystem.go:75 Updating filesystem policy action: 17 flags: CLOSE_WRITE 4026532353
- DEBU 2017-12-11T03:08:28.897 controller_filesystem.go:300 Tracking /k8s_POD_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0 pid: 18173 - namespace: 4026532353 - mounts: [/etc/resolv.conf /etc/hostname /etc/hosts /dev/shm /proc/kcore /proc/timer_list /proc / /dev] - blacklist: [] - whitelist: []
- DEBU 2017-12-11T03:08:28.897 controller_network.go:179 Adding network runtime data /k8s_POD_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:28.897 controller_network.go:182 Skipping network detection for infra image /k8s_POD_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:29.249 scanner.go:345 Scanning image us.gcr.io/flexdh-devops/twistlock/private:defender_2_2_100
- DEBU 2017-12-11T03:08:29.256 scanner.go:161 Image scanning started sha256:c48990706fd7a976a56ea829fd1f4bb719ddd962080f92b922aeb7c62dab2aaf
- DEBU 2017-12-11T03:08:29.270 scanner.go:240 Retrieving image from cache docker.io/twistlock/private:defender_2_2_100
- DEBU 2017-12-11T03:08:29.271 scanner.go:310 Image docker.io/twistlock/private:defender_2_2_100 sha256:c48990706fd7a976a56ea829fd1f4bb719ddd962080f92b922aeb7c62dab2aaf [scanning] 0.01 [sec]
- DEBU 2017-12-11T03:08:29.271 scanner.go:378 Image diagnose completed sha256:c48990706fd7a976a56ea829fd1f4bb719ddd962080f92b922aeb7c62dab2aaf
- DEBU 2017-12-11T03:08:29.451 main.go:192 Using defender hostname "gke-staging-2-product-default-pool-0a10e6e2-jr7h"
- DEBU 2017-12-11T03:08:29.451 defender.go:64 Starting defender version 2.2.100
- DEBU 2017-12-11T03:08:29.451 defender.go:65 Docker socket path /var/run/docker.sock
- DEBU 2017-12-11T03:08:29.451 defender.go:66 Hostname gke-staging-2-product-default-pool-0a10e6e2-jr7h
- DEBU 2017-12-11T03:08:29.451 defender.go:67 Local cache /var/lib/twistlock/local_db
- DEBU 2017-12-11T03:08:29.451 defender.go:68 Console Web socket address wss://35.227.171.196:8084
- DEBU 2017-12-11T03:08:29.451 defender.go:69 Systemd integration enabled false
- DEBU 2017-12-11T03:08:29.451 defender.go:70 Scan enabled true
- DEBU 2017-12-11T03:08:29.451 defender.go:71 Network scan enabled true
- DEBU 2017-12-11T03:08:29.451 defender.go:72 Syslog scan true
- DEBU 2017-12-11T03:08:29.451 defender.go:73 LDAP enabled false
- DEBU 2017-12-11T03:08:29.451 defender.go:74 Process scanning enabled true
- DEBU 2017-12-11T03:08:29.451 defender.go:75 Filesystem scanning enabled true
- DEBU 2017-12-11T03:08:29.451 defender.go:76 Defender type daemonset
- DEBU 2017-12-11T03:08:29.451 defender.go:77 Listener type unix
- DEBU 2017-12-11T03:08:29.451 defender.go:78 Proxy type
- DEBU 2017-12-11T03:08:29.455 defender.go:1517 Using docker API version "1.26"
- DEBU 2017-12-11T03:08:29.455 inventory_linux.go:76 Initializing Twistlock containers and images
- DEBU 2017-12-11T03:08:29.467 scanner.go:491 Scanning container c7619caddea30106c8369a460794b866c487a0c782c3f5185fd23a322e163a21
- DEBU 2017-12-11T03:08:29.471 inventory_linux.go:97 Found twistlock containers: map[c7619caddea30106c8369a460794b866c487a0c782c3f5185fd23a322e163a21:true], images: map[c48990706fd7a976a56ea829fd1f4bb719ddd962080f92b922aeb7c62dab2aaf:true]
- DEBU 2017-12-11T03:08:29.471 group.go:16 Configuring group accessor with '2' accessors
- DEBU 2017-12-11T03:08:29.471 db_malware.go:97 Initializing malware database
- DEBU 2017-12-11T03:08:29.471 defender.go:168 Using defender binary from /var/lib/twistlock/utils/defender
- DEBU 2017-12-11T03:08:29.487 scanner.go:55 Scanning container /k8s_twistlock-defender-2-2-100_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:41d31edba7cd799ae31941f1b9594610a6ee3760e97cbe1ee8ada8ee3d9aed53
- DEBU 2017-12-11T03:08:29.515 scanner.go:107 Container scanning completed /k8s_twistlock-defender-2-2-100_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:41d31edba7cd799ae31941f1b9594610a6ee3760e97cbe1ee8ada8ee3d9aed53
- DEBU 2017-12-11T03:08:29.567 app_profiler.go:91 Initializing applications database /data/defender.applications.json started
- INFO 2017-12-11T03:08:29.568 app_profiler.go:122 Initializing applications database completed (entries: '13' total: '13' errors:'0' last error:'<nil>')
- DEBU 2017-12-11T03:08:29.568 manager.go:289 Skipping container in host namespace: /k8s_twistlock-defender-2-2-100_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:41d31edba7cd799ae31941f1b9594610a6ee3760e97cbe1ee8ada8ee3d9aed53
- DEBU 2017-12-11T03:08:29.568 manager.go:282 Skipping infra image /k8s_POD_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:29.568 manager.go:289 Skipping container in host namespace: /twistlock_defender_2_2_100 twistlock/private:defender_2_2_100
- DEBU 2017-12-11T03:08:29.568 manager.go:282 Skipping infra image /k8s_POD_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:29.568 manager.go:282 Skipping infra image /k8s_POD_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:29.568 manager.go:289 Skipping container in host namespace: /k8s_prometheus-to-sd-exporter_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google-containers/prometheus-to-sd@sha256:c6aaa681e77e55aa7f7017ca55265accde313f8e2e5484ee1d0a4d89ff741c48
- DEBU 2017-12-11T03:08:29.568 manager.go:289 Skipping container in host namespace: /k8s_fluentd-gcp_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google-containers/fluentd-gcp@sha256:31a2043cc4dc93208c843cc44d1325f7ebf0d18a863bec738fe62b56965dbf62
- DEBU 2017-12-11T03:08:29.568 manager.go:282 Skipping infra image /k8s_POD_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:29.568 manager.go:289 Skipping container in host namespace: /k8s_kube-proxy_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 sha256:c9b6f1a423cf41d6fdccb1ca827005f1cc86e5d7d56392df8ddb4437733ae95e
- DEBU 2017-12-11T03:08:29.568 manager.go:282 Skipping infra image /k8s_POD_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:29.568 manager.go:141 Application firewall manager started
- DEBU 2017-12-11T03:08:29.568 ws.go:160 Web socket is not configured yet
- DEBU 2017-12-11T03:08:29.568 ws.go:245 Queing message, queue length: '0'
- DEBU 2017-12-11T03:08:29.572 ws.go:107 Reconnecting to wss://35.227.171.196:8084 TLS enabled true queue: 1
- DEBU 2017-12-11T03:08:29.643 manager.go:1327 Adding runtime data for /k8s_twistlock-defender-2-2-100_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:41d31edba7cd799ae31941f1b9594610a6ee3760e97cbe1ee8ada8ee3d9aed53
- DEBU 2017-12-11T03:08:29.670 app_profiler.go:83 Applications found [] /k8s_twistlock-defender-2-2-100_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:41d31edba7cd799ae31941f1b9594610a6ee3760e97cbe1ee8ada8ee3d9aed53
- DEBU 2017-12-11T03:08:29.671 manager.go:289 Skipping container in host namespace: /k8s_twistlock-defender-2-2-100_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:41d31edba7cd799ae31941f1b9594610a6ee3760e97cbe1ee8ada8ee3d9aed53
- DEBU 2017-12-11T03:08:29.674 topology_manager.go:221 Updating topology on new entity for /k8s_twistlock-defender-2-2-100_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:41d31edba7cd799ae31941f1b9594610a6ee3760e97cbe1ee8ada8ee3d9aed53
- DEBU 2017-12-11T03:08:29.674 controller_processes.go:100 Adding process runtime data /k8s_twistlock-defender-2-2-100_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:41d31edba7cd799ae31941f1b9594610a6ee3760e97cbe1ee8ada8ee3d9aed53
- DEBU 2017-12-11T03:08:29.674 controller_processes.go:126 Skipping process monitoring for host mode container /k8s_twistlock-defender-2-2-100_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:41d31edba7cd799ae31941f1b9594610a6ee3760e97cbe1ee8ada8ee3d9aed53
- DEBU 2017-12-11T03:08:29.674 controller_syscall.go:91 Container created, adding syscall monitoring to "/k8s_twistlock-defender-2-2-100_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:41d31edba7cd799ae31941f1b9594610a6ee3760e97cbe1ee8ada8ee3d9aed53"
- DEBU 2017-12-11T03:08:29.674 controller_filesystem.go:257 Adding filesystem runtime data /k8s_twistlock-defender-2-2-100_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:41d31edba7cd799ae31941f1b9594610a6ee3760e97cbe1ee8ada8ee3d9aed53
- DEBU 2017-12-11T03:08:29.677 ws.go:256 Sending 1 messages
- DEBU 2017-12-11T03:08:29.680 controller_filesystem.go:410 Bootstrap files found for proc /usr/local/bin/defender: [/var/lib/twistlock/log/defender.log]
- INFO 2017-12-11T03:08:29.680 tracker_filesystem.go:75 Updating filesystem policy action: 17 flags: CLOSE_WRITE 4026532356
- DEBU 2017-12-11T03:08:29.680 controller_filesystem.go:300 Tracking /k8s_twistlock-defender-2-2-100_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:41d31edba7cd799ae31941f1b9594610a6ee3760e97cbe1ee8ada8ee3d9aed53 pid: 18241 - namespace: 4026532356 - mounts: [/dev/log /var/tmp /var/lib/twistlock/certificates /dev/termination-log /proc /sys/fs/cgroup /tmp /run /data /dev/shm /var/run /var/lib/twistlock /] - blacklist: [] - whitelist: []
- DEBU 2017-12-11T03:08:29.680 controller_network.go:179 Adding network runtime data /k8s_twistlock-defender-2-2-100_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:41d31edba7cd799ae31941f1b9594610a6ee3760e97cbe1ee8ada8ee3d9aed53
- DEBU 2017-12-11T03:08:29.685 ws.go:301 Received message with type connect
- DEBU 2017-12-11T03:08:29.685 defender.go:1180 Received connect message for defender "gke-staging-2-product-default-pool-0a10e6e2-jr7h"
- DEBU 2017-12-11T03:08:29.686 api.go:33 Setting temporary token
- DEBU 2017-12-11T03:08:29.686 trust.go:21 Received update for trust group 0
- DEBU 2017-12-11T03:08:29.686 db_malware.go:78 Custom malware feed update with 0 entries
- DEBU 2017-12-11T03:08:29.686 scap_db.go:77 Scap database updated. records: '0'
- DEBU 2017-12-11T03:08:29.686 controller_processes.go:58 Received local audit settings update &{false true false false}
- DEBU 2017-12-11T03:08:29.686 authorizer.go:116 Policy updated docker (total access: 0 total vulnerabilities: 0)
- DEBU 2017-12-11T03:08:29.686 authorizer.go:116 Policy updated kubernetes (total access: 1 total vulnerabilities: 0)
- DEBU 2017-12-11T03:08:29.686 authorizer.go:116 Policy updated cve (total access: 2 total vulnerabilities: 0)
- DEBU 2017-12-11T03:08:29.686 authorizer.go:116 Policy updated compliance (total access: 2 total vulnerabilities: 1)
- DEBU 2017-12-11T03:08:29.686 container_stopper.go:119 Received blocked containers settings update '&{true}'
- DEBU 2017-12-11T03:08:29.686 container_stopper.go:64 Stopping all '0' blocked containers
- DEBU 2017-12-11T03:08:29.686 db_ips.go:164 Received update for custom feed IPs - entries 0
- DEBU 2017-12-11T03:08:29.686 db_ips.go:180 Updated custom feeds - entries '0'
- DEBU 2017-12-11T03:08:29.689 container_stopper.go:90 Received update for '0' stopped containers, current '0'
- DEBU 2017-12-11T03:08:29.689 container_stopper.go:64 Stopping all '0' blocked containers
- DEBU 2017-12-11T03:08:29.693 scanner.go:144 Scan is required
- DEBU 2017-12-11T03:08:29.693 scanner.go:142 Update schedule, running: false
- DEBU 2017-12-11T03:08:29.693 scanner.go:162 Stopping the registry scanner. Running: false
- DEBU 2017-12-11T03:08:29.693 scanner.go:142 Update schedule, running: false
- DEBU 2017-12-11T03:08:29.693 scanner.go:91 Update registry settings, running: false total: 0
- DEBU 2017-12-11T03:08:29.693 proxy.go:97 Received update from &{ListenerType: TargetType: KubernetesApiAddress: DefenderAPIAddress:} to {ListenerType:unix TargetType:docker KubernetesApiAddress:127.0.0.1:0 DefenderAPIAddress:tcp://:9998}
- DEBU 2017-12-11T03:08:29.693 scanner.go:523 Diagnosing containers
- DEBU 2017-12-11T03:08:29.697 listener.go:28 Listening on unix socket "/var/run/docker.sock.tmp"
- DEBU 2017-12-11T03:08:29.697 proxy.go:291 Proxying docker socket from /var/run/docker.sock to /var/run/docker.tw.sock
- DEBU 2017-12-11T03:08:29.696 manager.go:65 Updating app firewall policy new:0
- DEBU 2017-12-11T03:08:29.697 manager.go:71 Stopping existing firewalls
- DEBU 2017-12-11T03:08:29.697 manager.go:77 Updating container rules
- DEBU 2017-12-11T03:08:29.697 manager.go:83 Starting new firewalls
- DEBU 2017-12-11T03:08:29.700 proxy.go:425 Setting proxy to docker socket. Changing socket "/var/run/docker.sock" to "/var/run/docker.tw.sock"
- INFO 2017-12-11T03:08:29.702 proxy.go:295 Renaming temporary socket from /var/run/docker.sock.tmp to /var/run/docker.sock
- DEBU 2017-12-11T03:08:29.704 scanner.go:55 Scanning container /k8s_twistlock-defender-2-2-100_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:41d31edba7cd799ae31941f1b9594610a6ee3760e97cbe1ee8ada8ee3d9aed53
- DEBU 2017-12-11T03:08:29.705 proxy.go:309 Setting restart policy to restart unless stopped
- DEBU 2017-12-11T03:08:29.738 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:08:29.743 scanner.go:107 Container scanning completed /k8s_twistlock-defender-2-2-100_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:41d31edba7cd799ae31941f1b9594610a6ee3760e97cbe1ee8ada8ee3d9aed53
- DEBU 2017-12-11T03:08:29.752 scanner.go:55 Scanning container /k8s_POD_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:29.752 evaluator_network.go:28 Container "/k8s_POD_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0" started with network mode "host", skiping network compliance checks
- DEBU 2017-12-11T03:08:29.753 scanner.go:107 Container scanning completed /k8s_POD_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:29.757 scanner.go:55 Scanning container /twistlock_defender_2_2_100 twistlock/private:defender_2_2_100
- DEBU 2017-12-11T03:08:29.758 evaluator_network.go:28 Container "/twistlock_defender_2_2_100" started with network mode "host", skiping network compliance checks
- DEBU 2017-12-11T03:08:29.758 scanner.go:107 Container scanning completed /twistlock_defender_2_2_100 twistlock/private:defender_2_2_100
- DEBU 2017-12-11T03:08:29.765 scanner.go:55 Scanning container /k8s_twistlock-console_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:1b7f06f00a9947c2d331b4eb788b04ee4e8ca8b1f398063f70c48b359affeea3
- DEBU 2017-12-11T03:08:29.776 authorizer.go:125 Secrets policy updated
- DEBU 2017-12-11T03:08:29.799 scanner.go:107 Container scanning completed /k8s_twistlock-console_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:1b7f06f00a9947c2d331b4eb788b04ee4e8ca8b1f398063f70c48b359affeea3
- DEBU 2017-12-11T03:08:29.808 scanner.go:55 Scanning container /k8s_POD_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:29.837 scanner.go:107 Container scanning completed /k8s_POD_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:29.842 scanner.go:55 Scanning container /k8s_sidecar_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-sidecar-amd64@sha256:9aab42bf6a2a068b797fe7d91a5d8d915b10dbbc3d6f2b10492848debfba6044
- DEBU 2017-12-11T03:08:29.884 scanner.go:107 Container scanning completed /k8s_sidecar_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-sidecar-amd64@sha256:9aab42bf6a2a068b797fe7d91a5d8d915b10dbbc3d6f2b10492848debfba6044
- DEBU 2017-12-11T03:08:29.891 scanner.go:55 Scanning container /k8s_dnsmasq_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-dnsmasq-nanny-amd64@sha256:46b933bb70270c8a02fa6b6f87d440f6f1fce1a5a2a719e164f83f7b109f7544
- DEBU 2017-12-11T03:08:29.939 scanner.go:107 Container scanning completed /k8s_dnsmasq_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-dnsmasq-nanny-amd64@sha256:46b933bb70270c8a02fa6b6f87d440f6f1fce1a5a2a719e164f83f7b109f7544
- DEBU 2017-12-11T03:08:29.944 scanner.go:55 Scanning container /k8s_kubedns_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-kube-dns-amd64@sha256:1a3fc069de481ae690188f6f1ba4664b5cc7760af37120f70c86505c79eea61d
- DEBU 2017-12-11T03:08:29.982 scanner.go:107 Container scanning completed /k8s_kubedns_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-kube-dns-amd64@sha256:1a3fc069de481ae690188f6f1ba4664b5cc7760af37120f70c86505c79eea61d
- DEBU 2017-12-11T03:08:29.988 scanner.go:55 Scanning container /k8s_POD_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:30.036 scanner.go:107 Container scanning completed /k8s_POD_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:30.041 scanner.go:55 Scanning container /k8s_prometheus-to-sd-exporter_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google-containers/prometheus-to-sd@sha256:c6aaa681e77e55aa7f7017ca55265accde313f8e2e5484ee1d0a4d89ff741c48
- DEBU 2017-12-11T03:08:30.072 scanner.go:107 Container scanning completed /k8s_prometheus-to-sd-exporter_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google-containers/prometheus-to-sd@sha256:c6aaa681e77e55aa7f7017ca55265accde313f8e2e5484ee1d0a4d89ff741c48
- DEBU 2017-12-11T03:08:30.077 scanner.go:55 Scanning container /k8s_fluentd-gcp_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google-containers/fluentd-gcp@sha256:31a2043cc4dc93208c843cc44d1325f7ebf0d18a863bec738fe62b56965dbf62
- DEBU 2017-12-11T03:08:30.098 scanner.go:107 Container scanning completed /k8s_fluentd-gcp_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google-containers/fluentd-gcp@sha256:31a2043cc4dc93208c843cc44d1325f7ebf0d18a863bec738fe62b56965dbf62
- DEBU 2017-12-11T03:08:30.102 scanner.go:55 Scanning container /k8s_POD_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:30.119 evaluator_network.go:28 Container "/k8s_POD_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0" started with network mode "host", skiping network compliance checks
- DEBU 2017-12-11T03:08:30.119 scanner.go:107 Container scanning completed /k8s_POD_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:30.123 scanner.go:55 Scanning container /k8s_kube-proxy_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 sha256:c9b6f1a423cf41d6fdccb1ca827005f1cc86e5d7d56392df8ddb4437733ae95e
- DEBU 2017-12-11T03:08:30.150 scanner.go:107 Container scanning completed /k8s_kube-proxy_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 sha256:c9b6f1a423cf41d6fdccb1ca827005f1cc86e5d7d56392df8ddb4437733ae95e
- DEBU 2017-12-11T03:08:30.154 scanner.go:55 Scanning container /k8s_POD_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:30.170 evaluator_network.go:28 Container "/k8s_POD_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0" started with network mode "host", skiping network compliance checks
- DEBU 2017-12-11T03:08:30.170 scanner.go:107 Container scanning completed /k8s_POD_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:30.170 scanner.go:599 Containers diagnostics completed
- DEBU 2017-12-11T03:08:30.170 scanner.go:390 Diagnosing host
- INFO 2017-12-11T03:08:30.170 host_scanner_client.go:82 Initializing host scanner
- DEBU 2017-12-11T03:08:30.178 host_scanner_client.go:126 INFO 2017-12-11T03:08:30.178 Host scanning started
- ERRO 2017-12-11T03:08:30.492 proc_tree.go:173 Failed to get path for process, pid: 18129, readlink /proc/18129/exe: no such file or directory
- ERRO 2017-12-11T03:08:30.526 proc_tree.go:173 Failed to get path for process, pid: 18320, readlink /proc/18320/exe: no such file or directory
- DEBU 2017-12-11T03:08:30.744 host_scanner_client.go:126 DEBU 2017-12-11T03:08:30.744 Could not find Kubernetes version, paths: [/proc/1549/exe]
- DEBU 2017-12-11T03:08:30.744 host_scanner_client.go:126 DEBU 2017-12-11T03:08:30.744 Evaluating host vulnerabilities. &{ImageAugmentOptions:{IncludePackageFiles:false SkipArchive:true ExtractJAR:false HostScan:true Files:false} DockerAddress:unix:///var/run/docker.tw.sock VulnerabilityIDs: ScanPackages:true}
- DEBU 2017-12-11T03:08:30.744 host_scanner_client.go:126 WARN 2017-12-11T03:08:30.744 Failed to find ubuntu OS distro CHROMEOS_AUSERVER=https://tools.google.com/service/update2
- DEBU 2017-12-11T03:08:30.744 host_scanner_client.go:126 CHROMEOS_BOARD_APPID={76E245CF-C0D0-444D-BA50-36739C18EB00}
- DEBU 2017-12-11T03:08:30.744 host_scanner_client.go:126 CHROMEOS_CANARY_APPID={90F229CE-83E2-4FAF-8479-E368A34938B1}
- DEBU 2017-12-11T03:08:30.744 host_scanner_client.go:126 CHROMEOS_DEVSERVER=
- DEBU 2017-12-11T03:08:30.744 host_scanner_client.go:126 CHROMEOS_RELEASE_APPID={76E245CF-C0D0-444D-BA50-36739C18EB00}
- DEBU 2017-12-11T03:08:30.744 host_scanner_client.go:126 CHROMEOS_RELEASE_BOARD=lakitu-signed-mpkeys
- DEBU 2017-12-11T03:08:30.744 host_scanner_client.go:126 CHROMEOS_RELEASE_BRANCH_NUMBER=90
- DEBU 2017-12-11T03:08:30.744 host_scanner_client.go:126 CHROMEOS_RELEASE_BUILDER_PATH=lakitu-release/R60-9592.90.0
- DEBU 2017-12-11T03:08:30.744 host_scanner_client.go:126 CHROMEOS_RELEASE_BUILD_NUMBER=9592
- DEBU 2017-12-11T03:08:30.744 host_scanner_client.go:126 CHROMEOS_RELEASE_BUILD_TYPE=Official Build
- DEBU 2017-12-11T03:08:30.744 host_scanner_client.go:126 CHROMEOS_RELEASE_CHROME_MILESTONE=60
- DEBU 2017-12-11T03:08:30.744 host_scanner_client.go:126 CHROMEOS_RELEASE_DESCRIPTION=9592.90.0 (Official Build) stable-channel lakitu
- DEBU 2017-12-11T03:08:30.744 host_scanner_client.go:126 CHROMEOS_RELEASE_NAME=Chrome OS
- DEBU 2017-12-11T03:08:30.744 host_scanner_client.go:126 CHROMEOS_RELEASE_PATCH_NUMBER=0
- DEBU 2017-12-11T03:08:30.744 host_scanner_client.go:126 CHROMEOS_RELEASE_TRACK=stable-channel
- DEBU 2017-12-11T03:08:30.744 host_scanner_client.go:126 CHROMEOS_RELEASE_VERSION=9592.90.0
- DEBU 2017-12-11T03:08:30.744 host_scanner_client.go:126 DEVICETYPE=OTHER
- DEBU 2017-12-11T03:08:30.744 host_scanner_client.go:126 GOOGLE_RELEASE=9592.90.0
- DEBU 2017-12-11T03:08:30.744 host_scanner_client.go:126 HWID_OVERRIDE=LAKITU DEFAULT
- DEBU 2017-12-11T03:08:30.744 host_scanner_client.go:126 DEBU 2017-12-11T03:08:30.744 Image Distro cos 60
- DEBU 2017-12-11T03:08:30.744 host_scanner_client.go:126 DEBU 2017-12-11T03:08:30.744 Found packages map[] 0.00 seconds
- DEBU 2017-12-11T03:08:30.816 host_scanner_client.go:119 Received host scanning result
- DEBU 2017-12-11T03:08:30.816 host_scanner_client.go:97 Waiting on host scan command
- DEBU 2017-12-11T03:08:30.817 host_scanner_client.go:102 Host scanning command finished successfully
- DEBU 2017-12-11T03:08:30.817 scanner.go:114 Performing full image scan
- DEBU 2017-12-11T03:08:30.857 scanner.go:161 Image scanning started sha256:884183897e72ee37fd9870dc503ba7ae494ec179ae1ac104270bcd1c637f091c
- DEBU 2017-12-11T03:08:30.862 scanner.go:240 Retrieving image from cache us.gcr.io/flexdh-devops/twistlock/private:console_2_2_100
- DEBU 2017-12-11T03:08:30.863 scanner.go:310 Image us.gcr.io/flexdh-devops/twistlock/private:console_2_2_100 sha256:884183897e72ee37fd9870dc503ba7ae494ec179ae1ac104270bcd1c637f091c [scanning] 0.01 [sec]
- DEBU 2017-12-11T03:08:30.863 scanner.go:161 Image scanning started sha256:c48990706fd7a976a56ea829fd1f4bb719ddd962080f92b922aeb7c62dab2aaf
- DEBU 2017-12-11T03:08:30.869 scanner.go:240 Retrieving image from cache docker.io/twistlock/private:defender_2_2_100
- DEBU 2017-12-11T03:08:30.869 scanner.go:310 Image docker.io/twistlock/private:defender_2_2_100 sha256:c48990706fd7a976a56ea829fd1f4bb719ddd962080f92b922aeb7c62dab2aaf [scanning] 0.01 [sec]
- DEBU 2017-12-11T03:08:30.870 scanner.go:161 Image scanning started sha256:c9b6f1a423cf41d6fdccb1ca827005f1cc86e5d7d56392df8ddb4437733ae95e
- DEBU 2017-12-11T03:08:30.883 scanner.go:240 Retrieving image from cache gcr.io/google_containers/kube-proxy:v1.7.8-gke.0
- DEBU 2017-12-11T03:08:30.884 scanner.go:310 Image gcr.io/google_containers/kube-proxy:v1.7.8-gke.0 sha256:c9b6f1a423cf41d6fdccb1ca827005f1cc86e5d7d56392df8ddb4437733ae95e [scanning] 0.01 [sec]
- DEBU 2017-12-11T03:08:30.884 scanner.go:161 Image scanning started sha256:fed89e8b4248a788655d528d96fe644aff012879c782784cd486ff6894ef89f6
- DEBU 2017-12-11T03:08:30.901 scanner.go:240 Retrieving image from cache gcr.io/google_containers/k8s-dns-sidecar-amd64:1.14.5
- DEBU 2017-12-11T03:08:30.901 scanner.go:310 Image gcr.io/google_containers/k8s-dns-sidecar-amd64:1.14.5 sha256:fed89e8b4248a788655d528d96fe644aff012879c782784cd486ff6894ef89f6 [scanning] 0.02 [sec]
- DEBU 2017-12-11T03:08:30.901 scanner.go:161 Image scanning started sha256:512cd7425a731bee1f2a3e4c825fc1cfe516c8b7905874f24bee6da12801d663
- DEBU 2017-12-11T03:08:30.905 scanner.go:240 Retrieving image from cache gcr.io/google_containers/k8s-dns-kube-dns-amd64:1.14.5
- DEBU 2017-12-11T03:08:30.905 scanner.go:310 Image gcr.io/google_containers/k8s-dns-kube-dns-amd64:1.14.5 sha256:512cd7425a731bee1f2a3e4c825fc1cfe516c8b7905874f24bee6da12801d663 [scanning] 0.00 [sec]
- DEBU 2017-12-11T03:08:30.906 scanner.go:161 Image scanning started sha256:459944ce8cc4f08ebade5c05bb884e4da053d73e61ec6afe82a0b1687317254c
- DEBU 2017-12-11T03:08:30.910 scanner.go:240 Retrieving image from cache gcr.io/google_containers/k8s-dns-dnsmasq-nanny-amd64:1.14.5
- DEBU 2017-12-11T03:08:30.910 scanner.go:310 Image gcr.io/google_containers/k8s-dns-dnsmasq-nanny-amd64:1.14.5 sha256:459944ce8cc4f08ebade5c05bb884e4da053d73e61ec6afe82a0b1687317254c [scanning] 0.00 [sec]
- DEBU 2017-12-11T03:08:30.911 scanner.go:161 Image scanning started sha256:fa5e579ee511eaa2cccd571aca13011a028beb44670f8bb5a22aa023ee0726d5
- DEBU 2017-12-11T03:08:30.918 scanner.go:240 Retrieving image from cache gcr.io/google-containers/fluentd-gcp:2.0.9
- DEBU 2017-12-11T03:08:30.919 scanner.go:310 Image gcr.io/google-containers/fluentd-gcp:2.0.9 sha256:fa5e579ee511eaa2cccd571aca13011a028beb44670f8bb5a22aa023ee0726d5 [scanning] 0.01 [sec]
- DEBU 2017-12-11T03:08:30.920 scanner.go:161 Image scanning started sha256:5e65193af899d141f6a1375472c1bc46e0ee0eb7b9a45776fa63957fadb19188
- DEBU 2017-12-11T03:08:30.936 scanner.go:240 Retrieving image from cache gcr.io/google-containers/prometheus-to-sd:v0.1.3
- DEBU 2017-12-11T03:08:30.937 scanner.go:310 Image gcr.io/google-containers/prometheus-to-sd:v0.1.3 sha256:5e65193af899d141f6a1375472c1bc46e0ee0eb7b9a45776fa63957fadb19188 [scanning] 0.02 [sec]
- DEBU 2017-12-11T03:08:30.937 scanner.go:161 Image scanning started sha256:99e59f495ffaa222bfeb67580213e8c28c1e885f1d245ab2bbe3b1b1ec3bd0b2
- DEBU 2017-12-11T03:08:30.943 scanner.go:240 Retrieving image from cache gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:30.943 scanner.go:310 Image gcr.io/google_containers/pause-amd64:3.0 sha256:99e59f495ffaa222bfeb67580213e8c28c1e885f1d245ab2bbe3b1b1ec3bd0b2 [scanning] 0.01 [sec]
- DEBU 2017-12-11T03:08:30.943 scanner.go:755 Image diagnostics completed, total: 9 time 0.13
- ERRO 2017-12-11T03:08:31.373 proc_tree.go:173 Failed to get path for process, pid: 2003, readlink /proc/2003/exe: no such file or directory
- INFO 2017-12-11T03:08:31.417 defender.go:943 Process monitoring is enabled
- DEBU 2017-12-11T03:08:31.417 controller_processes.go:227 Initializing container processes (pid:18241)
- DEBU 2017-12-11T03:08:31.417 controller_processes.go:100 Adding process runtime data /k8s_twistlock-defender-2-2-100_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:41d31edba7cd799ae31941f1b9594610a6ee3760e97cbe1ee8ada8ee3d9aed53
- DEBU 2017-12-11T03:08:31.417 controller_processes.go:126 Skipping process monitoring for host mode container /k8s_twistlock-defender-2-2-100_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:41d31edba7cd799ae31941f1b9594610a6ee3760e97cbe1ee8ada8ee3d9aed53
- DEBU 2017-12-11T03:08:31.417 controller_processes.go:100 Adding process runtime data /k8s_POD_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:31.417 controller_processes.go:126 Skipping process monitoring for host mode container /k8s_POD_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:31.417 controller_processes.go:100 Adding process runtime data /twistlock_defender_2_2_100 twistlock/private:defender_2_2_100
- DEBU 2017-12-11T03:08:31.417 controller_processes.go:126 Skipping process monitoring for host mode container /twistlock_defender_2_2_100 twistlock/private:defender_2_2_100
- DEBU 2017-12-11T03:08:31.417 controller_processes.go:100 Adding process runtime data /k8s_twistlock-console_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:1b7f06f00a9947c2d331b4eb788b04ee4e8ca8b1f398063f70c48b359affeea3
- DEBU 2017-12-11T03:08:31.417 controller_processes.go:100 Adding process runtime data /k8s_POD_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:31.417 controller_processes.go:131 Tracking infra container processes using child process /k8s_POD_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:31.417 controller_processes.go:100 Adding process runtime data /k8s_sidecar_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-sidecar-amd64@sha256:9aab42bf6a2a068b797fe7d91a5d8d915b10dbbc3d6f2b10492848debfba6044
- DEBU 2017-12-11T03:08:31.417 controller_processes.go:100 Adding process runtime data /k8s_dnsmasq_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-dnsmasq-nanny-amd64@sha256:46b933bb70270c8a02fa6b6f87d440f6f1fce1a5a2a719e164f83f7b109f7544
- DEBU 2017-12-11T03:08:31.417 controller_processes.go:100 Adding process runtime data /k8s_kubedns_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-kube-dns-amd64@sha256:1a3fc069de481ae690188f6f1ba4664b5cc7760af37120f70c86505c79eea61d
- DEBU 2017-12-11T03:08:31.417 controller_processes.go:100 Adding process runtime data /k8s_POD_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:31.417 controller_processes.go:131 Tracking infra container processes using child process /k8s_POD_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:31.417 controller_processes.go:100 Adding process runtime data /k8s_prometheus-to-sd-exporter_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google-containers/prometheus-to-sd@sha256:c6aaa681e77e55aa7f7017ca55265accde313f8e2e5484ee1d0a4d89ff741c48
- DEBU 2017-12-11T03:08:31.417 controller_processes.go:100 Adding process runtime data /k8s_fluentd-gcp_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google-containers/fluentd-gcp@sha256:31a2043cc4dc93208c843cc44d1325f7ebf0d18a863bec738fe62b56965dbf62
- DEBU 2017-12-11T03:08:31.417 controller_processes.go:100 Adding process runtime data /k8s_POD_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:31.417 controller_processes.go:131 Tracking infra container processes using child process /k8s_POD_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:31.417 controller_processes.go:100 Adding process runtime data /k8s_kube-proxy_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 sha256:c9b6f1a423cf41d6fdccb1ca827005f1cc86e5d7d56392df8ddb4437733ae95e
- DEBU 2017-12-11T03:08:31.418 controller_processes.go:100 Adding process runtime data /k8s_POD_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:31.418 controller_processes.go:131 Tracking infra container processes using child process /k8s_POD_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:31.418 controller_processes.go:244 Namespace: 4026532180 - container: 3d461485fc42f81ef21068aec9447726a1a69d1d828f950c06e45acf6c403b0a
- DEBU 2017-12-11T03:08:31.418 controller_processes.go:244 Namespace: 4026532349 - container: c17715b81b9d5a6eb0ca1036fbfeb43c137f742258a74625f300e32f983e0b6f
- DEBU 2017-12-11T03:08:31.418 controller_processes.go:244 Namespace: 4026532271 - container: 6cf93a7c28066611af85e5ccdeddde46346617abbfb0045a2d6d6106b1ddd845
- DEBU 2017-12-11T03:08:31.418 controller_processes.go:244 Namespace: 4026532268 - container: d4b1df5f083dcd1f6473f54bbf4a7264e54430dabb92b4674c07789932d1a827
- DEBU 2017-12-11T03:08:31.418 controller_processes.go:244 Namespace: 4026532265 - container: 88f719f6d7d3772acc7f2d7b82877909631cb6e4f19f8b34974854f974998b20
- DEBU 2017-12-11T03:08:31.418 controller_processes.go:244 Namespace: 4026532190 - container: 65f933e6dea4845d6be4cac53ec46f67b2ce98a0265e097e14c36ba81dd41f58
- DEBU 2017-12-11T03:08:31.418 controller_processes.go:244 Namespace: 4026532188 - container: 2455e4fd0c00b3682bf6fc04fb491213d857b2961a2f7540f6bdd0196f58525d
- DEBU 2017-12-11T03:08:31.418 controller_processes.go:247 Container process data initialization completed
- DEBU 2017-12-11T03:08:31.418 manager.go:829 Updating runtime policy new:2
- DEBU 2017-12-11T03:08:31.418 manager.go:796 Updating host policy new:1
- DEBU 2017-12-11T03:08:31.418 manager.go:898 Profile update new: 0 total: 9
- DEBU 2017-12-11T03:08:31.507 manager.go:1327 Adding runtime data for /k8s_twistlock-defender-2-2-100_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:41d31edba7cd799ae31941f1b9594610a6ee3760e97cbe1ee8ada8ee3d9aed53
- DEBU 2017-12-11T03:08:31.530 manager.go:1327 Adding runtime data for /k8s_POD_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:31.684 ws.go:301 Received message with type ipFeedChanged
- DEBU 2017-12-11T03:08:31.684 ws.go:301 Received message with type malwareFeedChanged
- DEBU 2017-12-11T03:08:31.684 db_malware.go:52 Received malware db feed change event &{/feeds/malware.json }
- DEBU 2017-12-11T03:08:31.684 api.go:55 Downloading /feeds/malware.json to /data/defender.malware.json
- DEBU 2017-12-11T03:08:31.685 db_ips.go:141 IP feed update. Querying console
- DEBU 2017-12-11T03:08:31.687 api.go:55 Downloading /feeds/ips.json to /data/defender.ips.json
- DEBU 2017-12-11T03:08:31.691 manager.go:1327 Adding runtime data for /twistlock_defender_2_2_100 twistlock/private:defender_2_2_100
- DEBU 2017-12-11T03:08:31.902 manager.go:1327 Adding runtime data for /k8s_twistlock-console_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:1b7f06f00a9947c2d331b4eb788b04ee4e8ca8b1f398063f70c48b359affeea3
- DEBU 2017-12-11T03:08:31.943 manager.go:1327 Adding runtime data for /k8s_POD_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:32.064 manager.go:1327 Adding runtime data for /k8s_sidecar_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-sidecar-amd64@sha256:9aab42bf6a2a068b797fe7d91a5d8d915b10dbbc3d6f2b10492848debfba6044
- DEBU 2017-12-11T03:08:32.187 manager.go:1327 Adding runtime data for /k8s_dnsmasq_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-dnsmasq-nanny-amd64@sha256:46b933bb70270c8a02fa6b6f87d440f6f1fce1a5a2a719e164f83f7b109f7544
- DEBU 2017-12-11T03:08:32.246 db_malware.go:97 Initializing malware database
- DEBU 2017-12-11T03:08:32.400 manager.go:1327 Adding runtime data for /k8s_kubedns_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-kube-dns-amd64@sha256:1a3fc069de481ae690188f6f1ba4664b5cc7760af37120f70c86505c79eea61d
- DEBU 2017-12-11T03:08:32.466 manager.go:1327 Adding runtime data for /k8s_POD_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:32.555 manager.go:1327 Adding runtime data for /k8s_prometheus-to-sd-exporter_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google-containers/prometheus-to-sd@sha256:c6aaa681e77e55aa7f7017ca55265accde313f8e2e5484ee1d0a4d89ff741c48
- DEBU 2017-12-11T03:08:32.649 manager.go:1327 Adding runtime data for /k8s_fluentd-gcp_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google-containers/fluentd-gcp@sha256:31a2043cc4dc93208c843cc44d1325f7ebf0d18a863bec738fe62b56965dbf62
- DEBU 2017-12-11T03:08:32.700 manager.go:1327 Adding runtime data for /k8s_POD_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- INFO 2017-12-11T03:08:32.803 db_malware.go:151 Initializing malware database completed (entries: 20609 total:20609 errors:0 last error:<nil>)
- DEBU 2017-12-11T03:08:32.995 manager.go:1327 Adding runtime data for /k8s_kube-proxy_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 sha256:c9b6f1a423cf41d6fdccb1ca827005f1cc86e5d7d56392df8ddb4437733ae95e
- DEBU 2017-12-11T03:08:33.025 manager.go:1327 Adding runtime data for /k8s_POD_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:33.025 manager.go:1390 Adding runtime data for dockerd
- DEBU 2017-12-11T03:08:33.026 manager.go:1390 Adding runtime data for node-problem-de
- DEBU 2017-12-11T03:08:33.026 manager.go:1390 Adding runtime data for health-monitor.
- DEBU 2017-12-11T03:08:33.026 manager.go:1390 Adding runtime data for kubelet
- DEBU 2017-12-11T03:08:33.026 manager.go:1390 Adding runtime data for systemd-journal
- DEBU 2017-12-11T03:08:33.026 manager.go:1390 Adding runtime data for systemd-udevd
- DEBU 2017-12-11T03:08:33.026 manager.go:1390 Adding runtime data for systemd-timesyn
- DEBU 2017-12-11T03:08:33.026 manager.go:1390 Adding runtime data for systemd-logind
- DEBU 2017-12-11T03:08:33.026 manager.go:1390 Adding runtime data for dbus-daemon
- DEBU 2017-12-11T03:08:33.026 manager.go:1390 Adding runtime data for systemd-network
- DEBU 2017-12-11T03:08:33.026 manager.go:1390 Adding runtime data for systemd-resolve
- DEBU 2017-12-11T03:08:33.026 manager.go:1390 Adding runtime data for agetty
- DEBU 2017-12-11T03:08:33.026 manager.go:1390 Adding runtime data for sshd
- DEBU 2017-12-11T03:08:33.026 manager.go:1390 Adding runtime data for google_accounts
- DEBU 2017-12-11T03:08:33.026 manager.go:1390 Adding runtime data for google_clock_sk
- DEBU 2017-12-11T03:08:33.026 manager.go:1390 Adding runtime data for google_ip_forwa
- DEBU 2017-12-11T03:08:33.026 manager.go:1390 Adding runtime data for metrics_daemon
- DEBU 2017-12-11T03:08:33.026 manager.go:1390 Adding runtime data for device_policy_m
- DEBU 2017-12-11T03:08:33.026 manager.go:1390 Adding runtime data for update_engine
- INFO 2017-12-11T03:08:33.026 defender.go:989 System call monitoring is enabled
- DEBU 2017-12-11T03:08:33.056 syscall_audit.go:191 Sending AUDIT_STATUS_ENABLED to netlink socket, sequence: 1
- DEBU 2017-12-11T03:08:33.056 syscall_audit.go:195 Reading netlink socket, sequence: 1
- DEBU 2017-12-11T03:08:33.056 syscall_audit.go:210 Sending AUDIT_STATUS_PID to netlink socket, sequence: 2
- DEBU 2017-12-11T03:08:33.056 syscall_audit.go:215 Reading netlink socket, sequence: 2
- DEBU 2017-12-11T03:08:33.056 syscall_audit.go:219 Reading netlink socket completed, sequence: 2
- DEBU 2017-12-11T03:08:33.057 syscall_audit.go:242 Audit events polling started
- DEBU 2017-12-11T03:08:33.074 syscall_audit.go:321 Deleting all 0 twistlock configured rules
- DEBU 2017-12-11T03:08:33.074 syscall_audit.go:400 Checking syscall auditing state on this host
- DEBU 2017-12-11T03:08:33.075 syscall_audit.go:442 System call auditing is enabled
- INFO 2017-12-11T03:08:33.075 defender.go:1011 File system monitoring is enabled
- INFO 2017-12-11T03:08:33.075 tracker_filesystem.go:110 Initializing filesystem monitoring agent fsmon
- DEBU 2017-12-11T03:08:33.097 controller_filesystem.go:410 Bootstrap files found for proc /usr/local/bin/defender: [/data/defender.ips.json.egress.csv /data/defender.ips.json.ingress.csv /var/lib/twistlock/log/defender.log]
- DEBU 2017-12-11T03:08:33.117 controller_filesystem.go:410 Bootstrap files found for proc /usr/local/bin/defender: [/var/lib/twistlock/log/defender.log]
- DEBU 2017-12-11T03:08:33.126 controller_filesystem.go:410 Bootstrap files found for proc /usr/bin/mongod: [/var/lib/twistlock/db/WiredTiger.wt /var/lib/twistlock/db/sizeStorer.wt /var/lib/twistlock/db/WiredTigerLAS.wt /var/lib/twistlock/db/_mdb_catalog.wt /var/lib/twistlock/log/db.log /var/lib/twistlock/db/mongod.lock /var/lib/twistlock/db/WiredTiger.lock]
- DEBU 2017-12-11T03:08:33.126 controller_filesystem.go:410 Bootstrap files found for proc /app/server: [/var/lib/twistlock/log/console.log]
- DEBU 2017-12-11T03:08:33.186 db_ips.go:135 Loaded ips, total added:12028 received:45449, errors: 0, last error <nil> 0.80 [sec])
- DEBU 2017-12-11T03:08:33.196 controller_filesystem.go:410 Bootstrap files found for proc /usr/bin/ruby2.1: [/var/log/gcp-salt.pos /var/log/gcp-startupscript.log.pos /var/log/gcp-docker.log.pos /var/log/gcp-etcd.log.pos /var/log/gcp-kubelet.log.pos /var/log/gcp-kube-proxy.log.pos /var/log/gcp-kube-apiserver.log.pos /var/log/gcp-kube-apiserver-audit.log.pos /var/log/gcp-kube-controller-manager.log.pos /var/log/gcp-kube-scheduler.log.pos /var/log/gcp-rescheduler.log.pos /var/log/gcp-glbc.log.pos /var/log/gcp-cluster-autoscaler.log.pos /var/log/gcp-containers.log.pos]
- DEBU 2017-12-11T03:08:33.206 controller_filesystem.go:410 Bootstrap files found for proc /bin/dash: [/var/log/kube-proxy.log /var/log/kube-proxy.log]
- DEBU 2017-12-11T03:08:33.207 controller_filesystem.go:410 Bootstrap files found for proc /usr/local/bin/kube-proxy: [/var/log/kube-proxy.log /var/log/kube-proxy.log]
- DEBU 2017-12-11T03:08:33.212 controller_filesystem.go:376 Container filesystem data initialization completed
- DEBU 2017-12-11T03:08:33.212 controller_filesystem.go:382 Initializing host data
- DEBU 2017-12-11T03:08:33.212 controller_filesystem.go:394 host gke-staging-2-product-default-pool-0a10e6e2-jr7h namespace: 4026531840
- INFO 2017-12-11T03:08:33.212 defender.go:1050 Network monitoring is enabled
- DEBU 2017-12-11T03:08:33.212 defender.go:1540 Userspace connection tracking events via ctnetlink is enabled
- DEBU 2017-12-11T03:08:33.213 tracker_network_nfqueue_server.go:99 Starting network firewall server
- DEBU 2017-12-11T03:08:33.231 topology_manager.go:221 Updating topology on new entity for /k8s_twistlock-defender-2-2-100_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:41d31edba7cd799ae31941f1b9594610a6ee3760e97cbe1ee8ada8ee3d9aed53
- DEBU 2017-12-11T03:08:33.234 network_resolver.go:155 Skipping infra image /k8s_POD_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:33.241 tracker_network_conntrack.go:149 Conntrack started
- DEBU 2017-12-11T03:08:33.252 topology_manager.go:221 Updating topology on new entity for /twistlock_defender_2_2_100 twistlock/private:defender_2_2_100
- DEBU 2017-12-11T03:08:33.258 topology_manager.go:221 Updating topology on new entity for /k8s_twistlock-console_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:1b7f06f00a9947c2d331b4eb788b04ee4e8ca8b1f398063f70c48b359affeea3
- DEBU 2017-12-11T03:08:33.258 network_resolver.go:155 Skipping infra image /k8s_POD_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:33.265 topology_manager.go:221 Updating topology on new entity for /k8s_sidecar_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-sidecar-amd64@sha256:9aab42bf6a2a068b797fe7d91a5d8d915b10dbbc3d6f2b10492848debfba6044
- DEBU 2017-12-11T03:08:33.275 topology_manager.go:221 Updating topology on new entity for /k8s_dnsmasq_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-dnsmasq-nanny-amd64@sha256:46b933bb70270c8a02fa6b6f87d440f6f1fce1a5a2a719e164f83f7b109f7544
- DEBU 2017-12-11T03:08:33.283 topology_manager.go:221 Updating topology on new entity for /k8s_kubedns_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-kube-dns-amd64@sha256:1a3fc069de481ae690188f6f1ba4664b5cc7760af37120f70c86505c79eea61d
- DEBU 2017-12-11T03:08:33.283 network_resolver.go:155 Skipping infra image /k8s_POD_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:33.287 topology_manager.go:221 Updating topology on new entity for /k8s_prometheus-to-sd-exporter_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google-containers/prometheus-to-sd@sha256:c6aaa681e77e55aa7f7017ca55265accde313f8e2e5484ee1d0a4d89ff741c48
- DEBU 2017-12-11T03:08:33.292 topology_manager.go:221 Updating topology on new entity for /k8s_fluentd-gcp_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google-containers/fluentd-gcp@sha256:31a2043cc4dc93208c843cc44d1325f7ebf0d18a863bec738fe62b56965dbf62
- DEBU 2017-12-11T03:08:33.292 network_resolver.go:155 Skipping infra image /k8s_POD_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:33.294 topology_manager.go:221 Updating topology on new entity for /k8s_kube-proxy_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 sha256:c9b6f1a423cf41d6fdccb1ca827005f1cc86e5d7d56392df8ddb4437733ae95e
- DEBU 2017-12-11T03:08:33.294 network_resolver.go:155 Skipping infra image /k8s_POD_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:33.294 controller_network.go:179 Adding network runtime data /k8s_twistlock-defender-2-2-100_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:41d31edba7cd799ae31941f1b9594610a6ee3760e97cbe1ee8ada8ee3d9aed53
- DEBU 2017-12-11T03:08:33.294 controller_network.go:179 Adding network runtime data /k8s_POD_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:33.294 controller_network.go:182 Skipping network detection for infra image /k8s_POD_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:33.294 controller_network.go:179 Adding network runtime data /twistlock_defender_2_2_100 twistlock/private:defender_2_2_100
- DEBU 2017-12-11T03:08:33.294 controller_network.go:179 Adding network runtime data /k8s_twistlock-console_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:1b7f06f00a9947c2d331b4eb788b04ee4e8ca8b1f398063f70c48b359affeea3
- DEBU 2017-12-11T03:08:33.294 controller_network.go:179 Adding network runtime data /k8s_POD_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:33.294 controller_network.go:182 Skipping network detection for infra image /k8s_POD_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:33.294 controller_network.go:179 Adding network runtime data /k8s_sidecar_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-sidecar-amd64@sha256:9aab42bf6a2a068b797fe7d91a5d8d915b10dbbc3d6f2b10492848debfba6044
- DEBU 2017-12-11T03:08:33.294 controller_network.go:179 Adding network runtime data /k8s_dnsmasq_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-dnsmasq-nanny-amd64@sha256:46b933bb70270c8a02fa6b6f87d440f6f1fce1a5a2a719e164f83f7b109f7544
- DEBU 2017-12-11T03:08:33.294 controller_network.go:179 Adding network runtime data /k8s_kubedns_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-kube-dns-amd64@sha256:1a3fc069de481ae690188f6f1ba4664b5cc7760af37120f70c86505c79eea61d
- DEBU 2017-12-11T03:08:33.295 controller_network.go:179 Adding network runtime data /k8s_POD_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:33.295 controller_network.go:182 Skipping network detection for infra image /k8s_POD_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:33.295 controller_network.go:179 Adding network runtime data /k8s_prometheus-to-sd-exporter_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google-containers/prometheus-to-sd@sha256:c6aaa681e77e55aa7f7017ca55265accde313f8e2e5484ee1d0a4d89ff741c48
- DEBU 2017-12-11T03:08:33.295 controller_network.go:179 Adding network runtime data /k8s_fluentd-gcp_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google-containers/fluentd-gcp@sha256:31a2043cc4dc93208c843cc44d1325f7ebf0d18a863bec738fe62b56965dbf62
- DEBU 2017-12-11T03:08:33.295 controller_network.go:179 Adding network runtime data /k8s_POD_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:33.295 controller_network.go:182 Skipping network detection for infra image /k8s_POD_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:33.295 controller_network.go:179 Adding network runtime data /k8s_kube-proxy_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 sha256:c9b6f1a423cf41d6fdccb1ca827005f1cc86e5d7d56392df8ddb4437733ae95e
- DEBU 2017-12-11T03:08:33.295 controller_network.go:179 Adding network runtime data /k8s_POD_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:33.295 controller_network.go:182 Skipping network detection for infra image /k8s_POD_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:33.300 tracker_network_nfqueue_server.go:188 Network firewall: DEBU 2017-12-11T03:08:33.300 received policy to NFQueue sensor AUDIT
- DEBU 2017-12-11T03:08:33.320 app_profiler.go:83 Applications found [] /k8s_twistlock-defender-2-2-100_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:41d31edba7cd799ae31941f1b9594610a6ee3760e97cbe1ee8ada8ee3d9aed53
- DEBU 2017-12-11T03:08:33.359 app_profiler.go:83 Applications found [] /k8s_POD_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:33.387 app_profiler.go:83 Applications found [] /twistlock_defender_2_2_100 twistlock/private:defender_2_2_100
- DEBU 2017-12-11T03:08:33.419 app_profiler.go:241 Container: c17715b81b9d5a6eb0ca1036fbfeb43c137f742258a74625f300e32f983e0b6f application: /usr/bin/mongod listens on ports: [27017]
- DEBU 2017-12-11T03:08:33.419 app_profiler.go:83 Applications found [{/usr/bin/mongod [27017] false}] /k8s_twistlock-console_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:1b7f06f00a9947c2d331b4eb788b04ee4e8ca8b1f398063f70c48b359affeea3
- DEBU 2017-12-11T03:08:33.446 app_profiler.go:83 Applications found [] /k8s_POD_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:33.477 app_profiler.go:83 Applications found [] /k8s_sidecar_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-sidecar-amd64@sha256:9aab42bf6a2a068b797fe7d91a5d8d915b10dbbc3d6f2b10492848debfba6044
- DEBU 2017-12-11T03:08:33.510 app_profiler.go:83 Applications found [] /k8s_dnsmasq_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-dnsmasq-nanny-amd64@sha256:46b933bb70270c8a02fa6b6f87d440f6f1fce1a5a2a719e164f83f7b109f7544
- DEBU 2017-12-11T03:08:33.542 app_profiler.go:83 Applications found [] /k8s_kubedns_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-kube-dns-amd64@sha256:1a3fc069de481ae690188f6f1ba4664b5cc7760af37120f70c86505c79eea61d
- DEBU 2017-12-11T03:08:33.573 app_profiler.go:83 Applications found [] /k8s_POD_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:33.605 app_profiler.go:83 Applications found [] /k8s_prometheus-to-sd-exporter_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google-containers/prometheus-to-sd@sha256:c6aaa681e77e55aa7f7017ca55265accde313f8e2e5484ee1d0a4d89ff741c48
- DEBU 2017-12-11T03:08:33.635 app_profiler.go:83 Applications found [] /k8s_fluentd-gcp_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google-containers/fluentd-gcp@sha256:31a2043cc4dc93208c843cc44d1325f7ebf0d18a863bec738fe62b56965dbf62
- DEBU 2017-12-11T03:08:33.667 app_profiler.go:83 Applications found [] /k8s_POD_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:33.706 app_profiler.go:241 Container: 3d461485fc42f81ef21068aec9447726a1a69d1d828f950c06e45acf6c403b0a application: /usr/local/bin/kube-proxy listens on ports: []
- DEBU 2017-12-11T03:08:33.706 app_profiler.go:83 Applications found [{/usr/local/bin/kube-proxy [] true}] /k8s_kube-proxy_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 sha256:c9b6f1a423cf41d6fdccb1ca827005f1cc86e5d7d56392df8ddb4437733ae95e
- DEBU 2017-12-11T03:08:33.743 app_profiler.go:83 Applications found [] /k8s_POD_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:33.743 controller_syscall.go:131 Updating system call rules
- DEBU 2017-12-11T03:08:33.749 scanner.go:302 Next scan in 23h59m55.944553286s
- DEBU 2017-12-11T03:08:33.749 scanner.go:334 Rescheduling docker diagnose
- DEBU 2017-12-11T03:08:33.749 scanner.go:302 Next scan in 23h59m55.944436808s
- DEBU 2017-12-11T03:08:33.749 syscall_audit.go:321 Deleting all 0 twistlock configured rules
- INFO 2017-12-11T03:08:33.749 tracker_filesystem.go:75 Updating filesystem policy action: 17 flags: CLOSE_WRITE 4026532356
- DEBU 2017-12-11T03:08:33.750 controller_filesystem.go:300 Tracking /k8s_twistlock-defender-2-2-100_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:41d31edba7cd799ae31941f1b9594610a6ee3760e97cbe1ee8ada8ee3d9aed53 pid: 18241 - namespace: 4026532356 - mounts: [/dev/shm /dev/termination-log /var/lib/twistlock /var/lib/twistlock/certificates / /proc /sys/fs/cgroup /run /var/tmp /var/run /tmp /data /dev/log] - blacklist: [] - whitelist: []
- INFO 2017-12-11T03:08:33.750 tracker_filesystem.go:75 Updating filesystem policy action: 17 flags: CLOSE_WRITE 4026532353
- DEBU 2017-12-11T03:08:33.750 controller_filesystem.go:300 Tracking /k8s_POD_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0 pid: 18173 - namespace: 4026532353 - mounts: [/dev/shm /proc/kcore /proc/timer_list /proc /dev /etc/hosts / /etc/resolv.conf /etc/hostname] - blacklist: [] - whitelist: []
- INFO 2017-12-11T03:08:33.750 tracker_filesystem.go:75 Updating filesystem policy action: 17 flags: CLOSE_WRITE 4026532179
- DEBU 2017-12-11T03:08:33.750 controller_filesystem.go:300 Tracking /k8s_kube-proxy_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 sha256:c9b6f1a423cf41d6fdccb1ca827005f1cc86e5d7d56392df8ddb4437733ae95e pid: 1793 - namespace: 4026532179 - mounts: [/etc/hosts /var/lib/kube-proxy/kubeconfig / /proc /dev /var/log /etc/resolv.conf /etc/hostname /sys/fs/cgroup /run/xtables.lock /dev/termination-log /dev/shm] - blacklist: [] - whitelist: []
- INFO 2017-12-11T03:08:33.750 tracker_filesystem.go:75 Updating filesystem policy action: 17 flags: CLOSE_WRITE 4026532278
- DEBU 2017-12-11T03:08:33.750 controller_filesystem.go:300 Tracking /k8s_POD_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0 pid: 10506 - namespace: 4026532278 - mounts: [/etc/hostname /etc/hosts / /proc /dev /etc/resolv.conf /dev/shm /proc/kcore /proc/timer_list] - blacklist: [] - whitelist: []
- INFO 2017-12-11T03:08:33.750 tracker_filesystem.go:75 Updating filesystem policy action: 17 flags: CLOSE_WRITE 4026532266
- DEBU 2017-12-11T03:08:33.750 controller_filesystem.go:300 Tracking /k8s_dnsmasq_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-dnsmasq-nanny-amd64@sha256:46b933bb70270c8a02fa6b6f87d440f6f1fce1a5a2a719e164f83f7b109f7544 pid: 2377 - namespace: 4026532266 - mounts: [/proc/timer_list /proc /etc/resolv.conf /etc/hosts /dev/shm /proc/kcore / /dev /dev/termination-log /etc/hostname /etc/k8s/dns/dnsmasq-nanny] - blacklist: [] - whitelist: []
- INFO 2017-12-11T03:08:33.750 tracker_filesystem.go:75 Updating filesystem policy action: 17 flags: CLOSE_WRITE 4026532191
- DEBU 2017-12-11T03:08:33.750 controller_filesystem.go:300 Tracking /k8s_POD_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0 pid: 2202 - namespace: 4026532191 - mounts: [/dev /etc/hostname /proc/timer_list / /proc /etc/resolv.conf /etc/hosts /dev/shm /proc/kcore] - blacklist: [] - whitelist: []
- INFO 2017-12-11T03:08:33.750 tracker_filesystem.go:75 Updating filesystem policy action: 17 flags: CLOSE_WRITE 4026532189
- DEBU 2017-12-11T03:08:33.750 controller_filesystem.go:300 Tracking /k8s_prometheus-to-sd-exporter_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google-containers/prometheus-to-sd@sha256:c6aaa681e77e55aa7f7017ca55265accde313f8e2e5484ee1d0a4d89ff741c48 pid: 2054 - namespace: 4026532189 - mounts: [/etc/hostname /etc/hosts /proc/timer_list / /proc /dev/termination-log /dev/shm /proc/kcore /dev /etc/resolv.conf] - blacklist: [] - whitelist: []
- INFO 2017-12-11T03:08:33.750 tracker_filesystem.go:75 Updating filesystem policy action: 17 flags: CLOSE_WRITE 4026532350
- DEBU 2017-12-11T03:08:33.750 controller_filesystem.go:300 Tracking /twistlock_defender_2_2_100 twistlock/private:defender_2_2_100 pid: 16189 - namespace: 4026532350 - mounts: [/data /run /dev/shm / /proc /tmp /dev/log /var/run /var/tmp /var/lib/twistlock] - blacklist: [] - whitelist: []
- INFO 2017-12-11T03:08:33.750 tracker_filesystem.go:75 Updating filesystem policy action: 17 flags: CLOSE_WRITE 4026532187
- DEBU 2017-12-11T03:08:33.750 controller_filesystem.go:300 Tracking /k8s_fluentd-gcp_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google-containers/fluentd-gcp@sha256:31a2043cc4dc93208c843cc44d1325f7ebf0d18a863bec738fe62b56965dbf62 pid: 1961 - namespace: 4026532187 - mounts: [/var/log /etc/fluent/config.d /proc/timer_list /proc /dev/shm / /dev/termination-log /etc/resolv.conf /etc/hosts /var/lib/docker/containers/01e42a5b7915e970d3c78c119e45802311ae915bd61d954aa1a020f9e543cc49/shm /var/lib/docker/containers/8cb8914eafda3206094ef2d5b184675229e1186462091162d369eedfe8b2da6e/shm /proc/kcore /dev /etc/hostname] - blacklist: [] - whitelist: []
- INFO 2017-12-11T03:08:33.750 tracker_filesystem.go:75 Updating filesystem policy action: 17 flags: CLOSE_WRITE 4026532175
- DEBU 2017-12-11T03:08:33.750 controller_filesystem.go:300 Tracking /k8s_POD_kube-proxy-gke-staging-2-product-default-pool-0a10e6e2-jr7h_kube-system_8f08a0814b5e57b570e33039fe7195a6_0 gcr.io/google_containers/pause-amd64:3.0 pid: 1702 - namespace: 4026532175 - mounts: [/ /etc/hostname /etc/hosts /dev/shm /proc/timer_list /proc /dev /etc/resolv.conf /proc/kcore] - blacklist: [] - whitelist: []
- INFO 2017-12-11T03:08:33.750 tracker_filesystem.go:75 Updating filesystem policy action: 17 flags: CLOSE_WRITE 4026532347
- DEBU 2017-12-11T03:08:33.750 controller_filesystem.go:300 Tracking /k8s_twistlock-console_twistlock-console-7vm12_twistlock_c217a1ec-de1e-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:1b7f06f00a9947c2d331b4eb788b04ee4e8ca8b1f398063f70c48b359affeea3 pid: 10579 - namespace: 4026532347 - mounts: [/data/config /dev/termination-log /etc/hosts / /data /tmp /dev/shm /var/run /var/lib/twistlock-backup /var/lib/twistlock /proc /dev/log /var/log] - blacklist: [] - whitelist: []
- INFO 2017-12-11T03:08:33.750 tracker_filesystem.go:75 Updating filesystem policy action: 17 flags: CLOSE_WRITE 4026532269
- DEBU 2017-12-11T03:08:33.750 controller_filesystem.go:300 Tracking /k8s_sidecar_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-sidecar-amd64@sha256:9aab42bf6a2a068b797fe7d91a5d8d915b10dbbc3d6f2b10492848debfba6044 pid: 2502 - namespace: 4026532269 - mounts: [/etc/hosts /proc/timer_list / /proc /dev /etc/hostname /dev/shm /proc/kcore /dev/termination-log /etc/resolv.conf] - blacklist: [] - whitelist: []
- INFO 2017-12-11T03:08:33.750 tracker_filesystem.go:75 Updating filesystem policy action: 17 flags: CLOSE_WRITE 4026532183
- DEBU 2017-12-11T03:08:33.750 controller_filesystem.go:300 Tracking /k8s_POD_fluentd-gcp-v2.0.9-fhn9w_kube-system_914d0974-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0 pid: 1877 - namespace: 4026532183 - mounts: [/etc/resolv.conf /etc/hosts /dev/shm /proc/kcore / /proc /dev /etc/hostname /proc/timer_list] - blacklist: [] - whitelist: []
- INFO 2017-12-11T03:08:33.750 tracker_filesystem.go:75 Updating filesystem policy action: 17 flags: CLOSE_WRITE 4026532263
- DEBU 2017-12-11T03:08:33.750 controller_filesystem.go:300 Tracking /k8s_kubedns_kube-dns-3468831164-5dvb0_kube-system_9db0c097-de1c-11e7-8688-42010a8a0059_0 gcr.io/google_containers/k8s-dns-kube-dns-amd64@sha256:1a3fc069de481ae690188f6f1ba4664b5cc7760af37120f70c86505c79eea61d pid: 2304 - namespace: 4026532263 - mounts: [/proc/kcore /proc/timer_list /proc /dev /kube-dns-config /etc/hostname /dev/shm /dev/termination-log /etc/resolv.conf /etc/hosts /] - blacklist: [] - whitelist: []
- DEBU 2017-12-11T03:08:33.750 controller_filesystem.go:286 Tracking host: false - namespace: 4026531840 - mounts: [/]
- DEBU 2017-12-11T03:08:33.904 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:08:33.904 scanner.go:491 Scanning container a82f03a56cd8ab691b66f0f8d44db2146985303a71e5c34acfe46ea2c62de548
- DEBU 2017-12-11T03:08:33.907 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:08:33.911 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:08:33.914 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:08:33.914 scanner.go:55 Scanning container /k8s_POD_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:33.914 evaluator_network.go:28 Container "/k8s_POD_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0" started with network mode "host", skiping network compliance checks
- DEBU 2017-12-11T03:08:33.914 scanner.go:107 Container scanning completed /k8s_POD_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:33.915 scanner.go:345 Scanning image sha256:99e59f495ffaa222bfeb67580213e8c28c1e885f1d245ab2bbe3b1b1ec3bd0b2
- DEBU 2017-12-11T03:08:33.918 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:08:33.919 scanner.go:161 Image scanning started sha256:99e59f495ffaa222bfeb67580213e8c28c1e885f1d245ab2bbe3b1b1ec3bd0b2
- DEBU 2017-12-11T03:08:33.922 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:08:33.926 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:08:33.929 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:08:33.930 scanner.go:240 Retrieving image from cache gcr.io/google_containers/pause-amd64:3.0
- DEBU 2017-12-11T03:08:33.930 scanner.go:310 Image gcr.io/google_containers/pause-amd64:3.0 sha256:99e59f495ffaa222bfeb67580213e8c28c1e885f1d245ab2bbe3b1b1ec3bd0b2 [scanning] 0.01 [sec]
- DEBU 2017-12-11T03:08:33.930 scanner.go:378 Image diagnose completed sha256:99e59f495ffaa222bfeb67580213e8c28c1e885f1d245ab2bbe3b1b1ec3bd0b2
- DEBU 2017-12-11T03:08:34.687 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:08:34.688 scanner.go:491 Scanning container c7619caddea30106c8369a460794b866c487a0c782c3f5185fd23a322e163a21
- DEBU 2017-12-11T03:08:34.689 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:08:34.702 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:08:34.707 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:08:34.708 scanner.go:55 Scanning container /k8s_twistlock-defender-2-2-100_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:41d31edba7cd799ae31941f1b9594610a6ee3760e97cbe1ee8ada8ee3d9aed53
- DEBU 2017-12-11T03:08:34.714 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:08:34.716 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:08:34.722 scanner.go:107 Container scanning completed /k8s_twistlock-defender-2-2-100_twistlock-defender-ds-4sm5r_twistlock_8f50afff-de20-11e7-8688-42010a8a0059_0 us.gcr.io/flexdh-devops/twistlock/private@sha256:41d31edba7cd799ae31941f1b9594610a6ee3760e97cbe1ee8ada8ee3d9aed53
- DEBU 2017-12-11T03:08:34.722 scanner.go:345 Scanning image sha256:c48990706fd7a976a56ea829fd1f4bb719ddd962080f92b922aeb7c62dab2aaf
- DEBU 2017-12-11T03:08:34.726 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:08:34.727 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:08:34.727 scanner.go:161 Image scanning started sha256:c48990706fd7a976a56ea829fd1f4bb719ddd962080f92b922aeb7c62dab2aaf
- DEBU 2017-12-11T03:08:34.729 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:08:34.733 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:08:34.737 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:08:34.738 scanner.go:240 Retrieving image from cache docker.io/twistlock/private:defender_2_2_100
- DEBU 2017-12-11T03:08:34.739 scanner.go:310 Image docker.io/twistlock/private:defender_2_2_100 sha256:c48990706fd7a976a56ea829fd1f4bb719ddd962080f92b922aeb7c62dab2aaf [scanning] 0.01 [sec]
- DEBU 2017-12-11T03:08:34.739 scanner.go:378 Image diagnose completed sha256:c48990706fd7a976a56ea829fd1f4bb719ddd962080f92b922aeb7c62dab2aaf
- DEBU 2017-12-11T03:08:34.750 defender.go:1351 Stats: 2017-12-11 03:08:34.749 +0000 UTC CPU="4.0 %" VmRSS="30.75 MB" Connected="true" goroutines=42 files=24 procs=154
- DEBU 2017-12-11T03:08:34.750 proxy.go:209 Proxy stats, active :11, total: 30 avg: 317.00 [ms]
- DEBU 2017-12-11T03:08:34.750 proxy.go:214 API :image_inspect, total: 2 avg: 3.00 [ms]
- DEBU 2017-12-11T03:08:34.750 proxy.go:214 API :image_list, total: 1 avg: 3.00 [ms]
- DEBU 2017-12-11T03:08:34.750 proxy.go:214 API :image_history, total: 1 avg: 2.00 [ms]
- DEBU 2017-12-11T03:08:34.750 proxy.go:214 API :container_inspect, total: 4 avg: 8.00 [ms]
- DEBU 2017-12-11T03:08:34.750 proxy.go:214 API :container_list, total: 16 avg: 270.00 [ms]
- DEBU 2017-12-11T03:08:34.750 proxy.go:214 API :docker_version, total: 2 avg: 428.00 [ms]
- DEBU 2017-12-11T03:08:34.750 proxy.go:214 API :docker_ping, total: 1 avg: 50.00 [ms]
- DEBU 2017-12-11T03:08:34.775 topology_manager.go:264 Updating network topology [us.gcr.io/flexdh-devops/twistlock/private:defender_2_2_100] -> [internet] port: 8084. Effect: . Event type: 0
- DEBU 2017-12-11T03:08:34.775 topology_manager.go:264 Updating network topology [gcr.io/google-containers/prometheus-to-sd:v0.1.3] -> [internet] port: 443. Effect: . Event type: 0
- DEBU 2017-12-11T03:08:34.775 topology_manager.go:264 Updating network topology [gcr.io/google-containers/fluentd-gcp:2.0.9] -> [internet] port: 443. Effect: . Event type: 0
- DEBU 2017-12-11T03:08:34.775 topology_manager.go:264 Updating network topology [us.gcr.io/flexdh-devops/twistlock/private:console_2_2_100] -> [internet] port: 443. Effect: . Event type: 0
- DEBU 2017-12-11T03:08:34.775 topology_manager.go:264 Updating network topology [gcr.io/google_containers/kube-proxy:v1.7.8-gke.0] -> [internet] port: 443. Effect: . Event type: 0
- DEBU 2017-12-11T03:08:34.797 scheduler.go:86 Periodic tasks [task:Log rotation cnt:1 duration:5.746342e+06 errs:0] [task:Stats cnt:1 duration:1.000774174e+09 errs:0] [task:ProxyStats cnt:1 duration:157931 errs:0] [task:Resolve services cnt:1 duration:5.174202e+06 errs:0] [task:Connection resolution cnt:1 duration:2.0413743e+07 errs:0] [task:Ports resolution cnt:1 duration:2.1544438e+07 errs:0]
- ERRO 2017-12-11T03:08:40.032 controller_processes.go:164 Failed to remove process from proc tree: no process found with pid 18355
- DEBU 2017-12-11T03:08:44.572 defender.go:1227 Already connected. Skipping using cached data
- DEBU 2017-12-11T03:08:49.724 ws.go:301 Received message with type updateDefenderFeatures
- DEBU 2017-12-11T03:08:49.724 scanner.go:187 Starting registry scanning, running: false
- DEBU 2017-12-11T03:08:49.724 scanner.go:142 Update schedule, running: true
- DEBU 2017-12-11T03:08:49.724 scanner.go:147 Updating registry scan period to '0' [ms]
- DEBU 2017-12-11T03:08:49.724 scanner.go:152 Sent event schedule changed
- DEBU 2017-12-11T03:08:49.724 scanner.go:91 Update registry settings, running: true total: 0
- DEBU 2017-12-11T03:08:49.724 scanner.go:121 Registry settings did not changed, skipping update
- DEBU 2017-12-11T03:08:49.724 proxy.go:97 Received update from &{ListenerType:none TargetType:docker KubernetesApiAddress:127.0.0.1:0 DefenderAPIAddress:tcp://:9998} to {ListenerType:none TargetType:docker KubernetesApiAddress:127.0.0.1:0 DefenderAPIAddress:tcp://:9998}
- DEBU 2017-12-11T03:08:49.724 scanner.go:198 Next scan 23h59m59.999830862s
- DEBU 2017-12-11T03:08:49.724 scanner.go:203 Received action: schedule changed
- DEBU 2017-12-11T03:08:49.724 scanner.go:198 Next scan 23h59m59.999798087s
- DEBU 2017-12-11T03:08:53.728 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:09:03.833 ws.go:301 Received message with type kubernetesAPIPort
- DEBU 2017-12-11T03:09:03.833 proxy.go:97 Received update from &{ListenerType:none TargetType:docker KubernetesApiAddress:127.0.0.1:0 DefenderAPIAddress:tcp://:9998} to {ListenerType: TargetType: KubernetesApiAddress:127.0.0.1:8080 DefenderAPIAddress:tcp://:9998}
- DEBU 2017-12-11T03:09:03.833 ws.go:301 Received message with type kubernetesAPIPort
- DEBU 2017-12-11T03:09:03.835 proxy.go:97 Received update from &{ListenerType:unix TargetType:docker KubernetesApiAddress:127.0.0.1:0 DefenderAPIAddress:tcp://:9998} to {ListenerType: TargetType: KubernetesApiAddress:127.0.0.1:8080 DefenderAPIAddress:tcp://:9998}
- DEBU 2017-12-11T03:09:03.835 proxy.go:338 Listener is closing, failed to accept connection: accept unix /var/run/docker.sock.tmp: use of closed network connection
- INFO 2017-12-11T03:09:03.835 proxy.go:158 Defender terminated, stop listening. Error: proxy should stop listening
- DEBU 2017-12-11T03:09:03.836 defender.go:1455 Reverting docker local socket. Returning from socket /var/run/docker.tw.sock to /var/run/docker.sock
- DEBU 2017-12-11T03:09:03.840 proxy.go:240 Reverting restart policy: unless-stopped
- DEBU 2017-12-11T03:09:03.876 listener.go:28 Listening on unix socket "/var/run/docker.sock.tmp"
- DEBU 2017-12-11T03:09:03.877 proxy.go:291 Proxying docker socket from /var/run/docker.sock to /var/run/docker.tw.sock
- DEBU 2017-12-11T03:09:03.879 proxy.go:425 Setting proxy to docker socket. Changing socket "/var/run/docker.sock" to "/var/run/docker.tw.sock"
- INFO 2017-12-11T03:09:03.879 proxy.go:295 Renaming temporary socket from /var/run/docker.sock.tmp to /var/run/docker.sock
- DEBU 2017-12-11T03:09:03.882 proxy.go:309 Setting restart policy to restart unless stopped
- DEBU 2017-12-11T03:09:53.734 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:10:07.992 ws.go:301 Received message with type trustGroup
- DEBU 2017-12-11T03:10:07.993 ws.go:301 Received message with type trustGroup
- DEBU 2017-12-11T03:10:08.000 trust.go:21 Received update for trust group 1
- DEBU 2017-12-11T03:10:09.001 trust.go:21 Received update for trust group 1
- DEBU 2017-12-11T03:10:17.495 ws.go:301 Received message with type trustGroup
- DEBU 2017-12-11T03:10:17.496 ws.go:301 Received message with type trustGroup
- DEBU 2017-12-11T03:10:17.503 trust.go:21 Received update for trust group 2
- DEBU 2017-12-11T03:10:18.516 trust.go:21 Received update for trust group 2
- DEBU 2017-12-11T03:10:53.734 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:11:16.717 ws.go:301 Received message with type scanRegistry
- DEBU 2017-12-11T03:11:16.717 scanner.go:221 Received scan all registries request
- DEBU 2017-12-11T03:11:16.717 scanner.go:290 Registry scanning started. settings: 0 time: 2017-12-11 03:11:17 +0000 UTC false
- DEBU 2017-12-11T03:11:16.723 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:11:16.730 scanner.go:646 Registry scan completed (total:0 time:-0.27 completed: true)
- DEBU 2017-12-11T03:11:22.199 ws.go:301 Received message with type scanSystem
- DEBU 2017-12-11T03:11:22.199 scanner.go:390 Diagnosing host
- INFO 2017-12-11T03:11:22.199 host_scanner_client.go:82 Initializing host scanner
- DEBU 2017-12-11T03:11:22.200 ws.go:301 Received message with type scanSystem
- DEBU 2017-12-11T03:11:22.200 scanner.go:390 Diagnosing host
- INFO 2017-12-11T03:11:22.200 host_scanner_client.go:82 Initializing host scanner
- DEBU 2017-12-11T03:11:22.210 host_scanner_client.go:126 INFO 2017-12-11T03:11:22.210 Host scanning started
- DEBU 2017-12-11T03:11:22.232 host_scanner_client.go:126 INFO 2017-12-11T03:11:22.231 Host scanning started
- DEBU 2017-12-11T03:11:22.233 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:11:22.234 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:11:22.234 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:11:22.966 host_scanner_client.go:126 DEBU 2017-12-11T03:11:22.966 Could not find Kubernetes version, paths: [/proc/1549/exe]
- DEBU 2017-12-11T03:11:22.966 host_scanner_client.go:126 DEBU 2017-12-11T03:11:22.966 Evaluating host vulnerabilities. &{ImageAugmentOptions:{IncludePackageFiles:false SkipArchive:true ExtractJAR:false HostScan:true Files:false} DockerAddress:unix:///var/run/docker.sock VulnerabilityIDs: ScanPackages:true}
- DEBU 2017-12-11T03:11:22.966 host_scanner_client.go:126 WARN 2017-12-11T03:11:22.966 Failed to find ubuntu OS distro CHROMEOS_AUSERVER=https://tools.google.com/service/update2
- DEBU 2017-12-11T03:11:22.966 host_scanner_client.go:126 CHROMEOS_BOARD_APPID={76E245CF-C0D0-444D-BA50-36739C18EB00}
- DEBU 2017-12-11T03:11:22.966 host_scanner_client.go:126 CHROMEOS_CANARY_APPID={90F229CE-83E2-4FAF-8479-E368A34938B1}
- DEBU 2017-12-11T03:11:22.966 host_scanner_client.go:126 CHROMEOS_DEVSERVER=
- DEBU 2017-12-11T03:11:22.966 host_scanner_client.go:126 CHROMEOS_RELEASE_APPID={76E245CF-C0D0-444D-BA50-36739C18EB00}
- DEBU 2017-12-11T03:11:22.966 host_scanner_client.go:126 CHROMEOS_RELEASE_BOARD=lakitu-signed-mpkeys
- DEBU 2017-12-11T03:11:22.966 host_scanner_client.go:126 CHROMEOS_RELEASE_BRANCH_NUMBER=90
- DEBU 2017-12-11T03:11:22.966 host_scanner_client.go:126 CHROMEOS_RELEASE_BUILDER_PATH=lakitu-release/R60-9592.90.0
- DEBU 2017-12-11T03:11:22.966 host_scanner_client.go:126 CHROMEOS_RELEASE_BUILD_NUMBER=9592
- DEBU 2017-12-11T03:11:22.966 host_scanner_client.go:126 CHROMEOS_RELEASE_BUILD_TYPE=Official Build
- DEBU 2017-12-11T03:11:22.966 host_scanner_client.go:126 CHROMEOS_RELEASE_CHROME_MILESTONE=60
- DEBU 2017-12-11T03:11:22.966 host_scanner_client.go:126 CHROMEOS_RELEASE_DESCRIPTION=9592.90.0 (Official Build) stable-channel lakitu
- DEBU 2017-12-11T03:11:22.966 host_scanner_client.go:126 CHROMEOS_RELEASE_NAME=Chrome OS
- DEBU 2017-12-11T03:11:22.966 host_scanner_client.go:126 CHROMEOS_RELEASE_PATCH_NUMBER=0
- DEBU 2017-12-11T03:11:22.966 host_scanner_client.go:126 CHROMEOS_RELEASE_TRACK=stable-channel
- DEBU 2017-12-11T03:11:22.966 host_scanner_client.go:126 CHROMEOS_RELEASE_VERSION=9592.90.0
- DEBU 2017-12-11T03:11:22.966 host_scanner_client.go:126 DEVICETYPE=OTHER
- DEBU 2017-12-11T03:11:22.966 host_scanner_client.go:126 GOOGLE_RELEASE=9592.90.0
- DEBU 2017-12-11T03:11:22.966 host_scanner_client.go:126 HWID_OVERRIDE=LAKITU DEFAULT
- DEBU 2017-12-11T03:11:22.967 host_scanner_client.go:126 DEBU 2017-12-11T03:11:22.966 Image Distro cos 60
- DEBU 2017-12-11T03:11:22.967 host_scanner_client.go:126 DEBU 2017-12-11T03:11:22.966 Found packages map[] 0.00 seconds
- DEBU 2017-12-11T03:11:22.972 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:11:23.001 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:11:23.014 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:11:23.023 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:11:23.030 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:11:23.036 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:11:23.046 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:11:23.054 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:11:23.062 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:11:23.070 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:11:23.086 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:11:23.098 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:11:23.102 host_scanner_client.go:126 DEBU 2017-12-11T03:11:23.102 Could not find Kubernetes version, paths: [/proc/1549/exe]
- DEBU 2017-12-11T03:11:23.102 host_scanner_client.go:126 DEBU 2017-12-11T03:11:23.102 Evaluating host vulnerabilities. &{ImageAugmentOptions:{IncludePackageFiles:false SkipArchive:true ExtractJAR:false HostScan:true Files:false} DockerAddress:unix:///var/run/docker.tw.sock VulnerabilityIDs: ScanPackages:true}
- DEBU 2017-12-11T03:11:23.102 host_scanner_client.go:126 WARN 2017-12-11T03:11:23.102 Failed to find ubuntu OS distro CHROMEOS_AUSERVER=https://tools.google.com/service/update2
- DEBU 2017-12-11T03:11:23.102 host_scanner_client.go:126 CHROMEOS_BOARD_APPID={76E245CF-C0D0-444D-BA50-36739C18EB00}
- DEBU 2017-12-11T03:11:23.102 host_scanner_client.go:126 CHROMEOS_CANARY_APPID={90F229CE-83E2-4FAF-8479-E368A34938B1}
- DEBU 2017-12-11T03:11:23.102 host_scanner_client.go:126 CHROMEOS_DEVSERVER=
- DEBU 2017-12-11T03:11:23.102 host_scanner_client.go:126 CHROMEOS_RELEASE_APPID={76E245CF-C0D0-444D-BA50-36739C18EB00}
- DEBU 2017-12-11T03:11:23.102 host_scanner_client.go:126 CHROMEOS_RELEASE_BOARD=lakitu-signed-mpkeys
- DEBU 2017-12-11T03:11:23.102 host_scanner_client.go:126 CHROMEOS_RELEASE_BRANCH_NUMBER=90
- DEBU 2017-12-11T03:11:23.102 host_scanner_client.go:126 CHROMEOS_RELEASE_BUILDER_PATH=lakitu-release/R60-9592.90.0
- DEBU 2017-12-11T03:11:23.102 host_scanner_client.go:126 CHROMEOS_RELEASE_BUILD_NUMBER=9592
- DEBU 2017-12-11T03:11:23.102 host_scanner_client.go:126 CHROMEOS_RELEASE_BUILD_TYPE=Official Build
- DEBU 2017-12-11T03:11:23.102 host_scanner_client.go:126 CHROMEOS_RELEASE_CHROME_MILESTONE=60
- DEBU 2017-12-11T03:11:23.102 host_scanner_client.go:126 CHROMEOS_RELEASE_DESCRIPTION=9592.90.0 (Official Build) stable-channel lakitu
- DEBU 2017-12-11T03:11:23.103 host_scanner_client.go:126 CHROMEOS_RELEASE_NAME=Chrome OS
- DEBU 2017-12-11T03:11:23.103 host_scanner_client.go:126 CHROMEOS_RELEASE_PATCH_NUMBER=0
- DEBU 2017-12-11T03:11:23.103 host_scanner_client.go:126 CHROMEOS_RELEASE_TRACK=stable-channel
- DEBU 2017-12-11T03:11:23.103 host_scanner_client.go:126 CHROMEOS_RELEASE_VERSION=9592.90.0
- DEBU 2017-12-11T03:11:23.103 host_scanner_client.go:126 DEVICETYPE=OTHER
- DEBU 2017-12-11T03:11:23.103 host_scanner_client.go:126 GOOGLE_RELEASE=9592.90.0
- DEBU 2017-12-11T03:11:23.103 host_scanner_client.go:126 HWID_OVERRIDE=LAKITU DEFAULT
- DEBU 2017-12-11T03:11:23.103 host_scanner_client.go:126 DEBU 2017-12-11T03:11:23.103 Image Distro cos 60
- DEBU 2017-12-11T03:11:23.103 host_scanner_client.go:126 DEBU 2017-12-11T03:11:23.103 Found packages map[] 0.00 seconds
- DEBU 2017-12-11T03:11:23.106 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:11:23.113 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:11:23.120 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:11:23.129 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:11:23.143 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:11:23.156 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:11:23.162 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:11:23.167 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:11:23.167 host_scanner_client.go:119 Received host scanning result
- DEBU 2017-12-11T03:11:23.168 host_scanner_client.go:97 Waiting on host scan command
- DEBU 2017-12-11T03:11:23.169 host_scanner_client.go:102 Host scanning command finished successfully
- DEBU 2017-12-11T03:11:23.198 host_scanner_client.go:119 Received host scanning result
- DEBU 2017-12-11T03:11:23.198 host_scanner_client.go:97 Waiting on host scan command
- DEBU 2017-12-11T03:11:23.199 host_scanner_client.go:102 Host scanning command finished successfully
- DEBU 2017-12-11T03:11:53.750 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:12:53.735 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:13:53.714 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:14:53.725 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:15:53.747 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:16:53.725 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:16:55.803 defender.go:1351 Stats: 2017-12-11 03:16:55.802 +0000 UTC CPU="1.0 %" VmRSS="27.81 MB" Connected="true" goroutines=28 files=21 procs=139
- DEBU 2017-12-11T03:17:53.737 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:18:53.720 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:19:06.059 defender.go:1351 Stats: 2017-12-11 03:19:06.058 +0000 UTC CPU="6.0 %" VmRSS="36.79 MB" Connected="true" goroutines=28 files=22 procs=142
- DEBU 2017-12-11T03:19:06.078 topology_manager.go:264 Updating network topology [gcr.io/google-containers/prometheus-to-sd:v0.1.3] -> [gcr.io/google-containers/fluentd-gcp:2.0.9] port: 31337. Effect: monitor. Event type: 0
- DEBU 2017-12-11T03:19:53.745 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:20:53.731 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:21:53.727 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:22:53.730 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:23:30.376 ws.go:301 Received message with type scanSystem
- DEBU 2017-12-11T03:23:30.376 scanner.go:390 Diagnosing host
- INFO 2017-12-11T03:23:30.376 host_scanner_client.go:82 Initializing host scanner
- DEBU 2017-12-11T03:23:30.377 ws.go:301 Received message with type scanSystem
- DEBU 2017-12-11T03:23:30.377 scanner.go:390 Diagnosing host
- INFO 2017-12-11T03:23:30.377 host_scanner_client.go:82 Initializing host scanner
- DEBU 2017-12-11T03:23:30.396 host_scanner_client.go:126 INFO 2017-12-11T03:23:30.396 Host scanning started
- DEBU 2017-12-11T03:23:30.398 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:23:30.403 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:23:30.417 host_scanner_client.go:126 INFO 2017-12-11T03:23:30.417 Host scanning started
- DEBU 2017-12-11T03:23:30.429 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:23:31.069 host_scanner_client.go:126 DEBU 2017-12-11T03:23:31.062 Could not find Kubernetes version, paths: [/proc/1549/exe]
- DEBU 2017-12-11T03:23:31.070 host_scanner_client.go:126 DEBU 2017-12-11T03:23:31.062 Evaluating host vulnerabilities. &{ImageAugmentOptions:{IncludePackageFiles:false SkipArchive:true ExtractJAR:false HostScan:true Files:false} DockerAddress:unix:///var/run/docker.tw.sock VulnerabilityIDs: ScanPackages:true}
- DEBU 2017-12-11T03:23:31.070 host_scanner_client.go:126 WARN 2017-12-11T03:23:31.062 Failed to find ubuntu OS distro CHROMEOS_AUSERVER=https://tools.google.com/service/update2
- DEBU 2017-12-11T03:23:31.070 host_scanner_client.go:126 CHROMEOS_BOARD_APPID={76E245CF-C0D0-444D-BA50-36739C18EB00}
- DEBU 2017-12-11T03:23:31.070 host_scanner_client.go:126 CHROMEOS_CANARY_APPID={90F229CE-83E2-4FAF-8479-E368A34938B1}
- DEBU 2017-12-11T03:23:31.070 host_scanner_client.go:126 CHROMEOS_DEVSERVER=
- DEBU 2017-12-11T03:23:31.070 host_scanner_client.go:126 CHROMEOS_RELEASE_APPID={76E245CF-C0D0-444D-BA50-36739C18EB00}
- DEBU 2017-12-11T03:23:31.070 host_scanner_client.go:126 CHROMEOS_RELEASE_BOARD=lakitu-signed-mpkeys
- DEBU 2017-12-11T03:23:31.070 host_scanner_client.go:126 CHROMEOS_RELEASE_BRANCH_NUMBER=90
- DEBU 2017-12-11T03:23:31.070 host_scanner_client.go:126 CHROMEOS_RELEASE_BUILDER_PATH=lakitu-release/R60-9592.90.0
- DEBU 2017-12-11T03:23:31.070 host_scanner_client.go:126 CHROMEOS_RELEASE_BUILD_NUMBER=9592
- DEBU 2017-12-11T03:23:31.070 host_scanner_client.go:126 CHROMEOS_RELEASE_BUILD_TYPE=Official Build
- DEBU 2017-12-11T03:23:31.070 host_scanner_client.go:126 CHROMEOS_RELEASE_CHROME_MILESTONE=60
- DEBU 2017-12-11T03:23:31.070 host_scanner_client.go:126 CHROMEOS_RELEASE_DESCRIPTION=9592.90.0 (Official Build) stable-channel lakitu
- DEBU 2017-12-11T03:23:31.070 host_scanner_client.go:126 CHROMEOS_RELEASE_NAME=Chrome OS
- DEBU 2017-12-11T03:23:31.070 host_scanner_client.go:126 CHROMEOS_RELEASE_PATCH_NUMBER=0
- DEBU 2017-12-11T03:23:31.070 host_scanner_client.go:126 CHROMEOS_RELEASE_TRACK=stable-channel
- DEBU 2017-12-11T03:23:31.070 host_scanner_client.go:126 CHROMEOS_RELEASE_VERSION=9592.90.0
- DEBU 2017-12-11T03:23:31.070 host_scanner_client.go:126 DEVICETYPE=OTHER
- DEBU 2017-12-11T03:23:31.070 host_scanner_client.go:126 GOOGLE_RELEASE=9592.90.0
- DEBU 2017-12-11T03:23:31.070 host_scanner_client.go:126 HWID_OVERRIDE=LAKITU DEFAULT
- DEBU 2017-12-11T03:23:31.070 host_scanner_client.go:126 DEBU 2017-12-11T03:23:31.062 Image Distro cos 60
- DEBU 2017-12-11T03:23:31.070 host_scanner_client.go:126 DEBU 2017-12-11T03:23:31.062 Found packages map[] 0.00 seconds
- DEBU 2017-12-11T03:23:31.141 host_scanner_client.go:119 Received host scanning result
- DEBU 2017-12-11T03:23:31.141 host_scanner_client.go:97 Waiting on host scan command
- DEBU 2017-12-11T03:23:31.143 host_scanner_client.go:102 Host scanning command finished successfully
- DEBU 2017-12-11T03:23:31.185 host_scanner_client.go:126 DEBU 2017-12-11T03:23:31.185 Could not find Kubernetes version, paths: [/proc/1549/exe]
- DEBU 2017-12-11T03:23:31.185 host_scanner_client.go:126 DEBU 2017-12-11T03:23:31.185 Evaluating host vulnerabilities. &{ImageAugmentOptions:{IncludePackageFiles:false SkipArchive:true ExtractJAR:false HostScan:true Files:false} DockerAddress:unix:///var/run/docker.sock VulnerabilityIDs: ScanPackages:true}
- DEBU 2017-12-11T03:23:31.185 host_scanner_client.go:126 WARN 2017-12-11T03:23:31.185 Failed to find ubuntu OS distro CHROMEOS_AUSERVER=https://tools.google.com/service/update2
- DEBU 2017-12-11T03:23:31.185 host_scanner_client.go:126 CHROMEOS_BOARD_APPID={76E245CF-C0D0-444D-BA50-36739C18EB00}
- DEBU 2017-12-11T03:23:31.185 host_scanner_client.go:126 CHROMEOS_CANARY_APPID={90F229CE-83E2-4FAF-8479-E368A34938B1}
- DEBU 2017-12-11T03:23:31.186 host_scanner_client.go:126 CHROMEOS_DEVSERVER=
- DEBU 2017-12-11T03:23:31.186 host_scanner_client.go:126 CHROMEOS_RELEASE_APPID={76E245CF-C0D0-444D-BA50-36739C18EB00}
- DEBU 2017-12-11T03:23:31.186 host_scanner_client.go:126 CHROMEOS_RELEASE_BOARD=lakitu-signed-mpkeys
- DEBU 2017-12-11T03:23:31.186 host_scanner_client.go:126 CHROMEOS_RELEASE_BRANCH_NUMBER=90
- DEBU 2017-12-11T03:23:31.186 host_scanner_client.go:126 CHROMEOS_RELEASE_BUILDER_PATH=lakitu-release/R60-9592.90.0
- DEBU 2017-12-11T03:23:31.186 host_scanner_client.go:126 CHROMEOS_RELEASE_BUILD_NUMBER=9592
- DEBU 2017-12-11T03:23:31.186 host_scanner_client.go:126 CHROMEOS_RELEASE_BUILD_TYPE=Official Build
- DEBU 2017-12-11T03:23:31.186 host_scanner_client.go:126 CHROMEOS_RELEASE_CHROME_MILESTONE=60
- DEBU 2017-12-11T03:23:31.186 host_scanner_client.go:126 CHROMEOS_RELEASE_DESCRIPTION=9592.90.0 (Official Build) stable-channel lakitu
- DEBU 2017-12-11T03:23:31.186 host_scanner_client.go:126 CHROMEOS_RELEASE_NAME=Chrome OS
- DEBU 2017-12-11T03:23:31.186 host_scanner_client.go:126 CHROMEOS_RELEASE_PATCH_NUMBER=0
- DEBU 2017-12-11T03:23:31.186 host_scanner_client.go:126 CHROMEOS_RELEASE_TRACK=stable-channel
- DEBU 2017-12-11T03:23:31.186 host_scanner_client.go:126 CHROMEOS_RELEASE_VERSION=9592.90.0
- DEBU 2017-12-11T03:23:31.186 host_scanner_client.go:126 DEVICETYPE=OTHER
- DEBU 2017-12-11T03:23:31.186 host_scanner_client.go:126 GOOGLE_RELEASE=9592.90.0
- DEBU 2017-12-11T03:23:31.186 host_scanner_client.go:126 HWID_OVERRIDE=LAKITU DEFAULT
- DEBU 2017-12-11T03:23:31.186 host_scanner_client.go:126 DEBU 2017-12-11T03:23:31.185 Image Distro cos 60
- DEBU 2017-12-11T03:23:31.186 host_scanner_client.go:126 DEBU 2017-12-11T03:23:31.185 Found packages map[] 0.00 seconds
- DEBU 2017-12-11T03:23:31.190 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:23:31.215 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:23:31.221 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:23:31.230 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:23:31.236 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:23:31.241 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:23:31.247 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:23:31.253 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:23:31.259 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:23:31.269 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:23:31.271 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:23:31.276 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:23:31.281 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:23:31.286 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:23:31.297 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:23:31.305 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:23:31.313 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:23:31.321 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:23:31.328 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:23:31.335 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:23:31.337 host_scanner_client.go:119 Received host scanning result
- DEBU 2017-12-11T03:23:31.337 host_scanner_client.go:97 Waiting on host scan command
- DEBU 2017-12-11T03:23:31.338 host_scanner_client.go:102 Host scanning command finished successfully
- DEBU 2017-12-11T03:23:53.754 proxy_session.go:231 Transaction completed (proxy-remote)
- DEBU 2017-12-11T03:24:53.737 proxy_session.go:231 Transaction completed (proxy-remote)
Advertisement
Add Comment
Please, Sign In to add comment