Mark Stemm 7389e05852 Handle both ignored events and syscalls. ...

Henri pointed out that events may also be flagged as ignored. So
populate a second table with the set of ignored events, rename
check_for_ignored_syscalls to check_for_ignored_syscalls_events, and
separately check each table based on whether the LHS of the expression
is evt.type or syscall.type.

2016-05-06 18:12:46 -07:00

..

falco

Handle both ignored events and syscalls.

2016-05-06 18:12:46 -07:00