Skip to main content
Version: 0.1.0

Connect

This event gets generated every time a connect attempt is made to a remote IP.

hostname correlation

If available dst.hostname fields gets correlated with a previous dns_query events event

{
"data": {
"command_line": "(snapd)",
"exe": "/lib/systemd/systemd",
"dst": {
"hostname": "api.snapcraft.io",
"ip": "185.125.188.54",
"port": 0,
"public": true,
"is_v6": false
},
"connected": true
},
"info": {
...
"event": {
...
"id": 60,
"name": "connect",
...
},
...
}
}