jadoont/agent-behavior-index

Recorded at the kernel by Garnetfor commit 1c82945 (merge ref)

ABI experiment PR/agent

run 358004500422026-09-23 00:09 UTC

Execution chains

25 destinations · 20 processes

systemd
- hosted-compute-agent[2030 · hosted-compute-agent]
  - Runner.Listener
    - Runner.Worker[2141 · Runner.Worker]
      - bash
        bash
        xargs
        bash
        timeout
        docker[4310 · docker]step: <unknown>
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
        sudo
        node
        getent[5192 · getent]step: <unknown>
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
        docker
        docker-compose[5347 · docker-compose]step: <unknown>
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
      - node[8731 · node]
        api.github.com172.182.252.137:443 (https) · tcp
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
      - node[8866 · node]
        glb-db52c2cf8be544.github.com140.82.112.21:443 (https) · tcpalso recorded: results-receiver.actions.githubusercontent
        blob.bn9prdstrz04a.store.core.windows.net20.150.82.228:443 (https) · tcpalso recorded: blob.bn9prdstrz04a.trafficmanager.net, productionresultssa16.blob.core.windows
      - node[8839 · node]
        glb-db52c2cf8be544.github.com140.82.114.22:443 (https) · tcpalso recorded: results-receiver.actions.githubusercontent
        blob.bn9prdstrz04a.store.core.windows.net52.239.172.36:443 (https) · tcpalso recorded: blob.bn9prdstrz04a.trafficmanager.net, productionresultssa16.blob.core.windows
      - localhost127.0.0.53:53 (dns) · udp(dns resolver)
  - sudo
    - provjobd2943947099[2051 · provjobd2943947099]
      - 20.75.202.224:443 (https) · tcp
  - 20.75.202.224:443 (https) · tcp
  - localhost127.0.0.53:53 (dns) · udp(dns resolver)
- containerd-shim-runc-v2
  - touchsetup-iptables.shsetup-iptables.sh
    - getent[6016 · getent]
      - localhost127.0.0.11:38914, 53 (dns) · udp(dns resolver)
  - entrypoint.sh
    - awf-cmd-1.sh
      - node[6785 · node]step: <unknown>
        claude.exe[6859 · claude.exe]
        172.17.0.1:8080 (http-proxy) · tcp
        172.30.0.10:3128 (squid-proxy) · tcp
        172.30.0.30:10000 (ndmp), 10001 · tcp
        172.30.0.30:10000 (ndmp), 10001 · tcp
        localhost127.0.0.11:38914, 53 (dns) · udp(dns resolver)
    - api-proxy-health-check.shtimeoutbash
      - cat[6177 · cat]step: <unknown>
        172.30.0.30:10000 (ndmp), 10001 · tcp
  - awmg[4577 · awmg]step: <unknown>
    - api.github.com172.182.252.137:443 (https) · tcp
    - localhost127.0.0.53:53 (dns) · udp(dns resolver)
  - squid[5437 · squid]
    - api.anthropic.com160.79.104.10:443 (https) · tcp
    - 168.63.129.16:53 (dns) · udp
  - node[5444 · node]
    - 172.30.0.10:3128 (squid-proxy) · tcp
- dockerd[1199 · dockerd]
  - 168.63.129.16:53 (dns) · udp
  - ghcr.io172.182.252.136:443 (https) · tcp
  - auth.docker.io172.64.144.78:443 (https) · tcpalso recorded: auth.docker.io.cdn.cloudflare.net
  - pkg-containers.githubusercontent.com185.199.108.154:443 (https) · tcp
  - registry-1.docker.io34.233.183.139:443 (https) · tcp
  - d3ipk8a4rcghwr.cloudfront.net52.85.151.128:443 (https) · tcpalso recorded: production.cloudfront.docker.com
  - localhost127.0.0.53:53 (dns) · udp(dns resolver)
- systemd-resolved[528 · systemd-resolved]
  - 168.63.129.16:53 (dns) · udp
- python3.12
  - python3.12[1328 · python3.12]
    - 168.63.129.16:32526, 80 (http) · tcp
    - 169.254.169.254:80 (http) · tcp(cloud metadata)
- systemd-networkd[722 · systemd-networkd]
  - ip6-allroutersff02::2:0 (reserved) · icmpv6

Run details

Repositoryjadoont/agent-behavior-index

WorkflowABI experiment PR

Jobagent

Run ID35800450042

Profile UUID01a0cb99-1ba7-77b8-bad8-54670f486e0e

Commit SHA1c829458b9337efec4f020b95c15dd1b14577583(merge ref)

Refrefs/pull/4/merge

Timestamp2026-09-23 00:09:41 UTC

The record is egress-centric; processes without recorded egress do not appear.