landlock-genprof evidence show
Summarizes a raw evidence file
Synopsis
Summarizes a raw evidence file (see trace --events-out): how many events of each kind, distinct filesystem paths and network ports touched, and the observation time span. Answers “what did the tracer actually see,” distinct from explain, which answers “what rules did synthesis produce from it.”
Installed as a kubectl plugin (the common case): run this as kubectl landlock-genprof <command>. Running this binary directly instead (standalone, not via kubectl) works the same way, without that prefix.
landlock-genprof evidence show <events-file> [flags]
Examples
kubectl landlock-genprof evidence show nginx-demo-events.json
Options
-h, --help help for show
SEE ALSO
- landlock-genprof evidence - Inspects raw captured evidence