https://github.com/osquery/osquery logo
m

manikant singh

11/06/2020, 1:59 PM
Hi, I am getting an error while scheduling queries Malformed syscall event. The saddr field in the AUDIT_SOCKADDR record could not be parsed: "00000000000000000000000000000000" can someone please help what does this error means ?
a

alessandrogario

11/06/2020, 3:00 PM
This error is harmless; a program on the system called a network syscall (like connect()) using an invalid parameter
a sockaddr structure that is all zeroes is not valid
10 Views