{"ID":"1705071450.879:29498378","SYSCALL":{"arch":"0xc000003e","syscall":42,"success":"no","exit":-2,"items":1,"ppid":1064378,"pid":3736674,"auid":1000,"uid":1000,"gid":1000,"euid":1000,"suid":1000,"fsuid":1000,"egid":1000,"sgid":1000,"fsgid":1000,"tty":"pts9","ses":2,"comm":"ls","exe":"/usr/bin/ls","subj":"unconfined","key":null,"ARCH":"x86_64","SYSCALL":"connect","AUID":"user","UID":"user","GID":"user","EUID":"user","SUID":"user","FSUID":"user","EGID":"user","SGID":"user","FSGID":"user","ARGV":["0x4","0x7ffeabb1aa00","0x6e","0x0"]},"SOCKADDR":[{"saddr":"%01%00/var/run/nscd/socket%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%008S%02%00%00%00%00%008S%02%00%00%00%00%00%00%10%00%00%00%00%00%00%01%00%00%00%05%00%00%00%00`%02%00%00%00%00%00%00`%02%00%00%00%00%00%00`%02%00%00%00%00%00<L%15%00%00%00","SADDR":"{saddr_fam=local path=/var/run/nscd/socket}"}],"CWD":{"cwd":"/home/user"},"PATH":[{"item":0,"name":"/var/run/nscd/socket","nametype":"UNKNOWN","cap_fp":"0x0","cap_fi":"0x0","cap_fe":0,"cap_fver":"0x0","cap_frootid":"0"}]}