Solutions
Device management
Remotely manage, and protect laptops and mobile devices.
Orchestration
Automate tasks across devices, from app installs to scripts.
Software management
Inventory, patch, and manage installed software.
Extend Fleet
Integrate your favorite tools with Fleet.
Customers
Stripe + Fleet
Stripe consolidates multiple tools with Fleet.
Foursquare + Fleet
Foursquare quickly migrates to Fleet for device management.
What people are saying
Stories from the Fleet community.
Pricing
More
Tables
Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
Apple
Linux
Windows
ChromeOS
bpf_socket_events
bpf_socket_events EVENTED TABLE
Track network socket opens and closes.
| Column | Type | Description |
|---|---|---|
| cid | integer | Cgroup ID |
| duration | integer | How much time was spent inside the syscall (nsecs) |
| eid | integer | Event ID Not returned in SELECT * FROM bpf_socket_events. |
| exit_code | text | Exit code of the system call |
| family | integer | The Internet protocol family ID |
| fd | text | The file description for the process socket |
| gid | bigint | Group ID |
| local_address | text | Local address associated with socket |
| local_port | integer | Local network protocol port number |
| ntime | text | The nsecs uptime timestamp as obtained from BPF |
| parent | bigint | Parent process ID |
| path | text | Path of executed file |
| pid | bigint | Process ID |
| probe_error | integer | Set to 1 if one or more buffers could not be captured |
| protocol | integer | The network protocol ID |
| remote_address | text | Remote address associated with socket |
| remote_port | integer | Remote network protocol port number |
| syscall | text | System call name |
| tid | bigint | Thread ID |
| time | bigint | Time of execution in UNIX time Not returned in SELECT * FROM bpf_socket_events. |
| type | integer | The socket type |
| uid | bigint | User ID |
Questions?
SOC2 Type 2
