infomaniac777

Good point. Yeah, there will not be a DNS name mapping for such an IP. TBF, that's also gonna be the case if there is a hardcoded IP inside the container. With that said, the actual network connection(w/o the DNS name resolution) will still show up here because ultimately it has to open a socket if/when it connects. It will still give you that attributed to the container in dsnitch for further analysis.

It's required for mlock() of the pinned memory pool beyond default ulimits. As mentioned, it's at a MVP stage not GA. But I agree that a GA product should not have it eventually.