Execution chains — agent

systemd › containerd-shim-runc-v2 › entrypoint.sh › awf-cmd-1.sh › node (pid 6456 · node)

localhost [127.0.0.11] :53 (dns), 55185 UDP · (dns resolver)
172.30.0.30 :10000 (ndmp), 10001 TCP

systemd › containerd-shim-runc-v2 › touch › setup-iptables.sh › setup-iptables.sh › getent (pid 5937 · getent)

localhost [127.0.0.11] :53 (dns), 55185 UDP · (dns resolver)

systemd › hosted-compute-agent › Runner.Listener › Runner.Worker › bash › bash › xargs › bash › timeout › docker (pid 4120 · docker)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)

systemd › hosted-compute- › Runner.Listener › Runner.Worker › bash › bash › sudo › node › getent (pid 5194 · getent)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)

systemd › hosted-compute- › Runner.Listener › Runner.Worker › bash › bash › xargs › bash › timeout › docker (pid 4117 · docker)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)

systemd › containerd-shim-runc-v2 › awmg (pid 4580 · awmg)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
api.github.com [140.82.113.6] :443 (https) TCP

systemd › hosted-compute- › Runner.Listener › Runner.Worker › bash › bash › sudo › node › docker › docker-compose (pid 5353 · docker-compose)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)

systemd › dockerd (pid 1114 · dockerd)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
ghcr.io [140.82.114.34] :443 (https) TCP
pkg-containers.githubusercontent.com [185.199.108.154] :443 (https) TCP
pkg-containers.githubusercontent.com [185.199.109.154] :443 (https) TCP
pkg-containers.githubusercontent.com [185.199.110.154] :443 (https) TCP
pkg-containers.githubusercontent.com [185.199.111.154] :443 (https) TCP

systemd › containerd-shim-runc-v2 › containerd-shim-runc-v2 (pid 5447 · containerd-shim-runc-v2)

api.anthropic.com [160.79.104.10] :443 (https) TCP
168.63.129.16 :53 (dns) UDP

systemd › python3 › python3 (pid 1231 · python3)

168.63.129.16 :32526, 80 (http) TCP
169.254.169.254 :80 (http) TCP · (cloud metadata)

systemd › systemd-resolve (pid 401 · systemd-resolve)

168.63.129.16 :53 (dns) UDP

systemd › containerd-shim-runc-v2 › entrypoint.sh › awf-cmd-1.sh › node › claude.exe (pid 6555 · claude.exe)

172.17.0.1 :8080 (http-proxy) TCP
172.30.0.10 :3128 (squid-proxy) TCP
172.30.0.30 :10000 (ndmp), 10001 TCP

systemd › containerd-shim-runc-v2 › node (pid 5440 · node)

172.30.0.10 :3128 (squid-proxy) TCP

systemd › containerd-shim-runc-v2 › entrypoint.sh › api-proxy-health-check.sh › timeout › bash › cat (pid 6093 · cat)

172.30.0.30 :10000 (ndmp), 10001 TCP

systemd › hosted-compute- › sudo › sudo (pid 1876 · sudo)

20.75.202.224 :443 (https) TCP

systemd › hosted-compute- (pid 1860 · hosted-compute-)

20.75.202.224 :443 (https) TCP

systemd › systemd-network (pid 641 · systemd-network)

ip6-allrouters [ff02::2] :0 (reserved) ICMPV6

jadoont/agent-behavior-index

Recorded at the kernel by Garnetfor commit 0822380

Record agent run/agent

run 378740253412026-10-09 02:22 UTC

Execution chains

16 destinations · 17 processes

systemd
- hosted-compute-agentRunner.ListenerRunner.Worker
  - bash
    - bash
      - xargs
        bash
        timeout
        docker[4120 · docker]step: <unknown>
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
- hosted-compute-[1860 · hosted-compute-]
  - Runner.ListenerRunner.Worker
    - bash
      - bash
        sudo
        node
        getent[5194 · getent]step: <unknown>
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
        docker
        docker-compose[5353 · docker-compose]step: <unknown>
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
        xargs
        bash
        timeout
        docker[4117 · docker]step: <unknown>
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
  - sudo
    - sudo[1876 · sudo]
      - 20.75.202.224:443 (https) · tcp
  - 20.75.202.224:443 (https) · tcp
- containerd-shim-runc-v2
  - entrypoint.sh
    - awf-cmd-1.sh
      - node[6456 · node]step: <unknown>
        claude.exe[6555 · claude.exe]
        172.17.0.1:8080 (http-proxy) · tcp
        172.30.0.10:3128 (squid-proxy) · tcp
        172.30.0.30:10000 (ndmp), 10001 · tcp
        172.30.0.30:10000 (ndmp), 10001 · tcp
        localhost127.0.0.11:53 (dns), 55185 · udp(dns resolver)
    - api-proxy-health-check.shtimeoutbash
      - cat[6093 · cat]step: <unknown>
        172.30.0.30:10000 (ndmp), 10001 · tcp
  - touchsetup-iptables.shsetup-iptables.sh
    - getent[5937 · getent]
      - localhost127.0.0.11:53 (dns), 55185 · udp(dns resolver)
  - awmg[4580 · awmg]step: <unknown>
    - api.github.com140.82.113.6:443 (https) · tcp
    - localhost127.0.0.53:53 (dns) · udp(dns resolver)
  - containerd-shim-runc-v2[5447 · containerd-shim-runc-v2]
    - api.anthropic.com160.79.104.10:443 (https) · tcp
    - 168.63.129.16:53 (dns) · udp
  - node[5440 · node]
    - 172.30.0.10:3128 (squid-proxy) · tcp
- dockerd[1114 · dockerd]
  - ghcr.io140.82.114.34:443 (https) · tcp
  - pkg-containers.githubusercontent.com185.199.108.154:443 (https) · tcp
  - localhost127.0.0.53:53 (dns) · udp(dns resolver)
- python3
  - python3[1231 · python3]
    - 168.63.129.16:32526, 80 (http) · tcp
    - 169.254.169.254:80 (http) · tcp(cloud metadata)
- systemd-resolve[401 · systemd-resolve]
  - 168.63.129.16:53 (dns) · udp
- systemd-network[641 · systemd-network]
  - ip6-allroutersff02::2:0 (reserved) · icmpv6

Run details

Repositoryjadoont/agent-behavior-index

WorkflowRecord agent run

Jobagent

Run ID37874025341

Profile UUID01a11e79-8e78-7554-b8f1-01c20dbacdae

Commit SHA08223801f16deb1c8b8db762e1593c55a9711061

Timestamp2026-10-09 02:22:20 UTC

The record is egress-centric; processes without recorded egress do not appear.