diff --git a/userspace/falco/app_actions/process_events.cpp b/userspace/falco/app_actions/process_events.cpp index f537a2ab..977d9d53 100644 --- a/userspace/falco/app_actions/process_events.cpp +++ b/userspace/falco/app_actions/process_events.cpp @@ -123,6 +123,10 @@ application::run_result application::do_inspect(syscall_evt_drop_mgr &sdropmgr, continue; } + else if(rc == SCAP_FILTERED_EVENT) + { + continue; + } else if(rc == SCAP_EOF) { break;