Events Format

Events fields

Type	Field	Description
Common Fields (context)	timestamp	Timestamp of the request
	type	Type of request
	thread	Thread that issued the request
	pid	Process ID of the request
	data	Extra data (e.g., hostname)
Socket-related Fields	socket	String identifying the socket
	socket_type	Socket type (e.g., TCP, UDP)
	src	Source address
	src_port	Source port
	dst	Destination address
	dst_port	Destination port
Disk-related Fields	filename	Path of the file being processed by the request (optional)
	fd	Descriptor of the file being processed by the request
	offset	Offset (optional)
Content-related Fields	size	Size of data being read/written
	returned_value	Return value of the request
	data.msg	Request's content (optional - placed inside the data field)
	data.msg_len	Request's content size (optional - placed inside the data field)
	data.signature	Signature of the request's content (optional - placed inside the data field)

Events types

Type	Event	ID	Common Fields	Socket-related Fields	Disk-related Fields	Content-related Fields
Socket Event	send	8	☑	☑		☑
	receive	9	☑	☑		☑
	connect	11	☑	☑
	accept	12	☑	☑
Disk Event	write	21	☑		☑	☑
	read	22	☑		☑	☑
	open	23	☑		☑