jadoont/agent-behavior-index

Recorded at the kernel by Garnetfor commit 35d3a31 (merge ref)

ABI experiment PR/agent

run 357996105202026-09-22 23:57 UTC

Execution chains

26 destinations · 19 processes

systemd
- hosted-compute-agent[2055 · hosted-compute-agent]
  - Runner.Listener
    - Runner.Worker
      - bash
        bash
        xargs
        bash
        timeout
        docker[4419 · docker]step: <unknown>
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
        sudo
        node
        getent[5176 · getent]step: <unknown>
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
        docker
        docker-compose[5330 · docker-compose]step: <unknown>
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
      - node[8672 · node]
        api.github.com140.82.116.5:443 (https) · tcp
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
      - node[8809 · node]
        glb-db52c2cf8be544.github.com140.82.112.21:443 (https) · tcpalso recorded: results-receiver.actions.githubusercontent
        blob.blz25prdstrz09a.store.core.windows20.209.227.33:443 (https) · tcpalso recorded: blob.blz25prdstrz09a.trafficmanager.net, productionresultssa10.blob.core.windows
      - node[8783 · node]
        blob.blz25prdstrz09a.store.core.windows20.209.226.129:443 (https) · tcpalso recorded: blob.blz25prdstrz09a.trafficmanager.net, productionresultssa10.blob.core.windows
  - sudo
    - provjobd4090944639[2071 · provjobd4090944639]
      - 140.82.113.24:443 (https) · tcp
  - 140.82.114.23:443 (https) · tcp
  - localhost127.0.0.53:53 (dns) · udp(dns resolver)
- dockerd[1246 · dockerd]
  - registry-1.docker.io100.48.25.216:443 (https) · tcp
  - auth.docker.io104.18.43.178:443 (https) · tcpalso recorded: auth.docker.io.cdn.cloudflare.net
  - ghcr.io140.82.116.34:443 (https) · tcp
  - 168.63.129.16:53 (dns) · udp
  - d3ipk8a4rcghwr.cloudfront.net18.238.238.123:443 (https) · tcpalso recorded: production.cloudfront.docker.com
  - pkg-containers.githubusercontent.com185.199.108.154:443 (https) · tcp
  - localhost127.0.0.53:53 (dns) · udp(dns resolver)
- containerd-shim-runc-v2
  - touchsetup-iptables.shsetup-iptables.sh
    - getent[5925 · getent]
      - localhost127.0.0.11:34027, 53 (dns) · udp(dns resolver)
  - entrypoint.sh
    - awf-cmd-1.sh
      - node[6616 · node]step: <unknown>
        claude.exe[6689 · claude.exe]
        172.17.0.1:8080 (http-proxy) · tcp
        172.30.0.10:3128 (squid-proxy) · tcp
        172.30.0.30:10000 (ndmp), 10001 · tcp
        172.30.0.30:10000 (ndmp), 10001 · tcp
        localhost127.0.0.11:34027, 53 (dns) · udp(dns resolver)
    - api-proxy-health-check.shtimeoutbash
      - cat[6099 · cat]step: <unknown>
        172.30.0.30:10000 (ndmp), 10001 · tcp
  - awmg[4566 · awmg]step: <unknown>
    - api.github.com20.29.134.17:443 (https) · tcp
    - localhost127.0.0.53:53 (dns) · udp(dns resolver)
  - squid[5415 · squid]
    - api.anthropic.com160.79.104.10:443 (https) · tcp
    - 168.63.129.16:53 (dns) · udp
  - node[5426 · node]
    - 172.30.0.10:3128 (squid-proxy) · tcp
- python3.12
  - python3.12[1390 · python3.12]
    - 168.63.129.16:32526, 80 (http) · tcp
    - 169.254.169.254:80 (http) · tcp(cloud metadata)
- systemd-resolved[582 · systemd-resolved]
  - 168.63.129.16:53 (dns) · udp
- systemd-networkd[740 · systemd-networkd]
  - ip6-allroutersff02::2:0 (reserved) · icmpv6

Run details

Repositoryjadoont/agent-behavior-index

WorkflowABI experiment PR

Jobagent

Run ID35799610520

Profile UUID01a0cb8e-1ca3-7345-8c66-01b1794ff60c

Commit SHA35d3a3116f84dfd29a88c1f5448e312d063d1def(merge ref)

Refrefs/pull/4/merge

Timestamp2026-09-22 23:57:44 UTC

The record is egress-centric; processes without recorded egress do not appear.