@Seshu https://github.com/facebook/osquery/blob/master/osquery/tables/applications/posix/docker.cpp#L74 is there any way to solve the line in question without comparing against "HTTP/1.0" ?