@@ -270,8 +270,9 @@ func TestProcessCallstack(t *testing.T) {
270270 Category : event .Process ,
271271 Host : "archrabbit" ,
272272 Params : event.Params {
273- params .ProcessParentID : {Name : params .ProcessParentID , Type : params .PID , Value : (uint32 (os .Getpid ()))},
274- params .Callstack : {Name : params .Callstack , Type : params .Slice , Value : []va.Address {0x7ffb5c1d0396 , 0x7ffb5d8e61f4 , 0x7ffb3138592e , 0x7ffb313853b2 , 0x2638e59e0a5 }},
273+ params .ProcessParentID : {Name : params .ProcessParentID , Type : params .PID , Value : (uint32 (os .Getpid ()))},
274+ params .ProcessRealParentID : {Name : params .ProcessRealParentID , Type : params .PID , Value : (uint32 (os .Getpid ()))},
275+ params .Callstack : {Name : params .Callstack , Type : params .Slice , Value : []va.Address {0x7ffb5c1d0396 , 0x7ffb5d8e61f4 , 0x7ffb3138592e , 0x7ffb313853b2 , 0x2638e59e0a5 }},
275276 },
276277 PS : proc ,
277278 }
@@ -443,8 +444,9 @@ func TestProcessCallstackProcsTTL(t *testing.T) {
443444 Category : event .Process ,
444445 Host : "archrabbit" ,
445446 Params : event.Params {
446- params .ProcessParentID : {Name : params .ProcessParentID , Type : params .PID , Value : (uint32 (os .Getpid ()))},
447- params .Callstack : {Name : params .Callstack , Type : params .Slice , Value : []va.Address {0x7ffb5c1d0396 , 0x7ffb5d8e61f4 , 0x7ffb3138592e , 0x7ffb313853b2 , 0x2638e59e0a5 }},
447+ params .ProcessParentID : {Name : params .ProcessParentID , Type : params .PID , Value : (uint32 (os .Getpid ()))},
448+ params .ProcessRealParentID : {Name : params .ProcessRealParentID , Type : params .PID , Value : (uint32 (os .Getpid ()))},
449+ params .Callstack : {Name : params .Callstack , Type : params .Slice , Value : []va.Address {0x7ffb5c1d0396 , 0x7ffb5d8e61f4 , 0x7ffb3138592e , 0x7ffb313853b2 , 0x2638e59e0a5 }},
448450 },
449451 }
450452 _ , _ = s .ProcessEvent (e )
0 commit comments