Execution chains — py-install

systemd › hosted-compute- › Runner.Listener › Runner.Worker › node (pid 2717 · node)

releases.astral.sh [104.26.13.77] :443 (https) TCP
raw.githubusercontent.com [185.199.111.133] :443 (https) TCP

systemd › hosted-compute- › Runner.Listener › Runner.Worker › bash › sudo › apt-get › http (pid 2753 · http)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
packages.microsoft.com [13.107.213.40] :443 (https) TCP · also recorded: part-0012.t-0009.t-msedge.net, shed.dual-low.part-0012.t-0009.t-msedge, azurefd-critical-t-prod-stage2.trafficmanager, pmc-prod-afd-endpoint-evdhh8f8byhsezfp.b01

systemd › python3.12 › http (pid 2796 · http)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
esm.ubuntu.com [185.125.190.23] :443 (https) TCP

systemd › hosted-compute- › Runner.Listener › Runner.Worker › node (pid 2661 · node)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
github.com [140.82.114.4] :443 (https) TCP
api.github.com [140.82.114.5] :443 (https) TCP
release-assets.githubusercontent.com [185.199.108.133] :443 (https) TCP

systemd › hosted-compute- › Runner.Listener › Runner.Worker › node › bash › python3.14 (pid 2693 · python3.14)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
dualstack.python.map.fastly.net [151.101.192.223] :443 (https) TCP · also recorded: files.pythonhosted.org
dualstack.python.map.fastly.net [151.101.64.223] :443 (https) TCP · also recorded: files.pythonhosted.org

systemd › hosted-compute- › Runner.Listener › Runner.Worker › bash › uv › git › git › git-remote-http (pid 3485 · git-remote-http)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
github.com [140.82.114.4] :443 (https) TCP

systemd › hosted-compute- › Runner.Listener › Runner.Worker › bash › uv (pid 3420 · uv)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
dualstack.python.map.fastly.net [151.101.0.223] :443 (https) TCP · also recorded: files.pythonhosted.org
dualstack.python.map.fastly.net [151.101.128.223] :443 (https) TCP · also recorded: files.pythonhosted.org
dualstack.python.map.fastly.net [151.101.192.223] :443 (https) TCP · also recorded: files.pythonhosted.org
dualstack.python.map.fastly.net [151.101.64.223] :443 (https) TCP · also recorded: files.pythonhosted.org

systemd › hosted-compute- › Runner.Listener › Runner.Worker (pid 2232 · Runner.Worker)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)

systemd › hosted-compute- (pid 2081 · hosted-compute-)

localhost [127.0.0.53] :53 (dns) UDP · (dns resolver)
20.75.202.224 :443 (https) TCP

systemd › python3 › python3 (pid 1398 · python3)

168.63.129.16 :32526, 80 (http) TCP
169.254.169.254 :80 (http) TCP · (cloud metadata)

systemd › systemd-resolve (pid 489 · systemd-resolve)

168.63.129.16 :53 (dns) UDP

systemd › hosted-compute- › sudo › sudo (pid 2120 · sudo)

20.75.202.224 :443 (https) TCP

systemd › hosted-compute- › Runner.Listener › Runner.Worker › bash › sudo › apt-get › http (pid 2757 · http)

azure.archive.ubuntu.com [52.147.219.192] :80 (http) TCP · also recorded: cloud-mirror-lb.eastus.cloudapp.azure.com, ubuntu-archive-asm.trafficmanager.net

systemd › python3.12 › http (pid 2765 · http)

motd.ubuntu.com [54.154.251.197] :443 (https) TCP

systemd › systemd-network (pid 729 · systemd-network)

ip6-allrouters [ff02::2] :0 (reserved) ICMPV6

garnet-labs/posthog

Recorded at the kernel by Garnetfor commit 2566be6 (merge ref)

Garnet Runtime Visibility/py-install

run 419746029642026-11-05 05:34 UTC

Execution chains

18 destinations · 15 processes

systemd
- hosted-compute-[2081 · hosted-compute-]
  - Runner.Listener
    - Runner.Worker[2232 · Runner.Worker]
      - bash
        sudo
        apt-get
        http[2753 · http]
        packages.microsoft.com13.107.213.40:443 (https) · tcpalso recorded: part-0012.t-0009.t-msedge.net, shed.dual-low.part-0012.t-0009.t-msedge, azurefd-critical-t-prod-stage2.trafficmanager, pmc-prod-afd-endpoint-evdhh8f8byhsezfp.b01
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
        http[2757 · http]
        azure.archive.ubuntu.com52.147.219.192:80 (http) · tcpalso recorded: cloud-mirror-lb.eastus.cloudapp.azure.com, ubuntu-archive-asm.trafficmanager.net
        uv[3420 · uv]
        git
        git
        git-remote-http[3485 · git-remote-http]
        github.com140.82.114.4:443 (https) · tcp
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
        dualstack.python.map.fastly.net151.101.0.223:443 (https) · tcpalso recorded: files.pythonhosted.org
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
      - node[2661 · 2717 · node]
        bash
        python3.14[2693 · python3.14]
        dualstack.python.map.fastly.net151.101.192.223:443 (https) · tcpalso recorded: files.pythonhosted.org
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
        releases.astral.sh104.26.13.77:443 (https) · tcp
        raw.githubusercontent.com185.199.111.133:443 (https) · tcp
        github.com140.82.114.4:443 (https) · tcp
        api.github.com140.82.114.5:443 (https) · tcp
        release-assets.githubusercontent.com185.199.108.133:443 (https) · tcp
        localhost127.0.0.53:53 (dns) · udp(dns resolver)
      - localhost127.0.0.53:53 (dns) · udp(dns resolver)
  - sudo
    - sudo[2120 · sudo]
      - 20.75.202.224:443 (https) · tcp
  - 20.75.202.224:443 (https) · tcp
  - localhost127.0.0.53:53 (dns) · udp(dns resolver)
- python3.12
  - http[2796 · http]
    - esm.ubuntu.com185.125.190.23:443 (https) · tcp
    - localhost127.0.0.53:53 (dns) · udp(dns resolver)
  - http[2765 · http]
    - motd.ubuntu.com54.154.251.197:443 (https) · tcp
- python3
  - python3[1398 · python3]
    - 168.63.129.16:32526, 80 (http) · tcp
    - 169.254.169.254:80 (http) · tcp(cloud metadata)
- systemd-resolve[489 · systemd-resolve]
  - 168.63.129.16:53 (dns) · udp
- systemd-network[729 · systemd-network]
  - ip6-allroutersff02::2:0 (reserved) · icmpv6

Run details

Repositorygarnet-labs/posthog

WorkflowGarnet Runtime Visibility

Jobpy-install

Run ID41974602964

Profile UUID01a1aa33-ac33-7630-849a-ab970f7cf6b5

Commit SHA2566be69029eea77de614ca8f71b721b2edd0c55(merge ref)

Refrefs/pull/246/merge

Timestamp2026-11-05 05:34:33 UTC

The record is egress-centric; processes without recorded egress do not appear.