Skip to main content
Version: latest

SocketEnricher

The Socket enricher operator provides information about the socket owner, i.e. the process that created the socket. This is used to correlate sockets and process information in gadgets that only have information about the socket, like networking ones. The following information can be gotten from a socket object:

  • Mount namespace inode ID
  • Process name
  • Process and Thread IDs
  • User and Group IDs

Priority​

10

Parameters​

None