https://github.com/osquery/osquery logo
#auditing-warroom
Title
# auditing-warroom
n

Natalia King

03/07/2019, 6:59 PM
Copy code
Malformed syscall event. The saddr field in the AUDIT_SOCKADDR record could not be parsed: "00000000000000000000000000000000"
c

clong

03/07/2019, 7:00 PM
ah this should be unrelated to selinux, probably tied to a socket_event
n

Natalia King

03/07/2019, 7:00 PM
agreed
54 Views