draios / draios/sysdig-inspect

'SYSCALLS' view doesn't show all syscalls

Open
#41 11 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

type: bug
Dominant language
JavaScript
Stars
1k
Forks
76
PR merge metrics
No merged PRs in 30d

Description

When viewing the syscalls from a capture file in sysdig-inspect there are many syscalls missing. For example I can see the first 6800 syscalls and then it suddenly jumps to syscall 30400. If I run the csysdig command used by sysdig-inspect in the terminal and pipe the result to a file, I can see that there are many relevant syscalls between 6800 and 30400 which are not visible in sysdig-inspect.

The executed command is:

csysdig -r <capture-file> -v dig -j -pc "evt.type != switch"

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Reproduce the issue with the shown csysdig command and a capture file, then compare its output with the SYSCALLS view in sysdig-inspect. Trace how the command output is consumed and displayed, focusing on where events between syscall 6800 and 30400 could be omitted. Done means the view shows the same relevant syscalls as the command output.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript
Domain
frontend
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
42/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.