Announcing Sysdig 0.1.94

• Improved performance of libscap during live captures
• Expand the sysdig-probe ring buffer size: now it’s 8 MB per CPU (was 1 MB)
• Fix syntax error in fdtime_by chisel
• Fix syntax error in zsh completion
• Many minor bugfixes
• evt.latency was returning wrong values

New and updated features

• get_terminal_info chisel API function

New and updated chisels

• spectrogram chisel: Visualize OS latency in real time.

New and updated filter fields

• evt.buflen filter field

New and Updated events

• clone, execve, fork, vfork: return comm parameter to report the executable file name rather than guessing it from argv[0]

Resources

Release details

Update instructions

Installation instructions

Source code

Support

Community support is available on the sysdig mailing list.

Bugs and issues can be submitted through github.

---

Eager to learn more? Check out our online session: Building an Open Source Container Security Stack

On this session Sysdig and Anchore are presenting how using Falco and Anchore Engine you can build a complete open source container security stack for Docker and Kubernetes.

This online session will live demo:

• Using Falco, NATS and Kubeless to build a Kubernetes response engine and implement real-time attack remediation with security playbooks using FaaS.
• How Anchore Engine can detect software vulnerabilities in your images, and how can be integrated with Jenkins, Kubernetes and Falco.