Lower ptrace tracee resolution error and add more context

DataDog · Dec 10, 2024 · 2a2715b · 2a2715b
1 parent 86aa47a
commit 2a2715b
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/pkg/security/probe/probe_ebpf.go b/pkg/security/probe/probe_ebpf.go
@@ -1097,7 +1097,8 @@ func (p *EBPFProbe) handleEvent(CPU int, data []byte) {
 				} else {
 					pid, err := utils.TryToResolveTraceePid(event.ProcessContext.Process.Pid, event.PTrace.NSPID)
 					if err != nil {
-						seclog.Errorf("PTrace err: %v", err)
+						seclog.Tracef("PTrace tracee resolution error for process %s in container %s: %v",
+							event.ProcessContext.Process.FileEvent.FilepathStr, containerID, err)
 						return
 					}
 					pidToResolve = pid